Behavioral task
behavioral1
Sample
9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127.doc
Resource
win10v2004-20240226-en
General
-
Target
9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127
-
Size
2.4MB
-
MD5
0c8ae23f7013dfca2c88201e63a4df1f
-
SHA1
c5bc8951334d629fd1de72b3d3e5dc1835d827bb
-
SHA256
9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127
-
SHA512
3b77d29d1b579d5a53ee904e0e4ad8aeaa85fac0427925d044c4b30383a4e089fb4a2d21f28699daf4b5f0eee06d129706ab23276564d05bf12ba5a9c0ad7271
-
SSDEEP
24576:zYkpItUp1DOiI/Qo+MFJoiEaYSm44NCUCkxqXGhKcnj3kCxhA45YIbL7pv/OGE3i:HItU8bFbrNkxq21D
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127.doc windows office2003
ThisWorkbook
PopulateProfilesDropDownModule
QUERIESErrorsTrap
frmDateChangeThree
ConvertCurrencytoWords
SUMSubTotalingNotCrossTab
QUERIESSetSQLStringModule
FINDAmortizationScedule
QUERIESObtainTablesandColumns
UNIVERSALMacros
InsertRowWithinNamedRange
FunctionsCalledFromWithin
QUERIESFormatSQLResults
MISCFindZeroCombinations
frmHelpSystem
ALTERComplexDataFillIn
AAAPublicVariables
SUMSubTotalInPlace
QUERIESOpenPivotTableQuery
SUMCalculateAlwaysOn
ALTERSortBasedOnColor
QUERIESRemoteExecution
Sound
ALTERSortNineModule
QUERIESSQLViaADOObject
QUERIESSQLViaQueryTableObject
frmExecuteSQLStatement
CLEANMinorMacros
SUMSubTotalingCrossTab
SwapMouse
frmAmortization
FunctionsNotUsed
frmColorSort
frmMaintainConnectionProfiles
FormStarters
Sheet01
FINDFileListingCode
frmDateChangeFour
ALTERDateConverter
QUERIESSetConnectionModule
HELPAuthorized
PasswordBreaker
FINDAccessConnectionStrings
OpenProtectedWorkBook
QUERIESExampleProfiles
frmDateChangeTwo
VideoHelp
frmFlipSigns
frmConvertASCIICharacters
FINDBuildSearchList
SUMMinorMacros
FUNTIONSFunctionWriter
frmDateChangeOne
frmPivotTablesGetData
frmSortNine
frmHelpAbout
TheDataWandBuilder
CallingTheHelpFile
FINDAutomatedComparrison
FINDMarkExactInOutInBue
frmNoPermission
frmComplexFillInMessage
modRecycleVBA
SUMCount
ClassConnectionProfile
frmObtainAuthCodeInuptBox
LISTSMinorMacros
FINDMinorMacros
MISCMinorMacros
HELPMinorMacros
QUERIESMinorMacros
ALTERMinorMacros
QUERIESBuildTabsAndExecute
ClassSetCopyRowAndColumn
HELPCreateModules
Version14AndAbove
ALTERTranspose
frmHelpApplyRoundingFunction