Behavioral task
behavioral1
Sample
95949e13a7a926f285fe29d15df8386e8e47991461e374f6bcce46b23980d685.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95949e13a7a926f285fe29d15df8386e8e47991461e374f6bcce46b23980d685.doc
Resource
win10v2004-20240226-en
General
-
Target
95949e13a7a926f285fe29d15df8386e8e47991461e374f6bcce46b23980d685
-
Size
906KB
-
MD5
a1bdc647e38d0b77f3752c0949a879f0
-
SHA1
a57892f534caf502126ccd7bb6d21a0cd1d97229
-
SHA256
95949e13a7a926f285fe29d15df8386e8e47991461e374f6bcce46b23980d685
-
SHA512
04b6c815614c30558f87efbce9c4cb0c0da8c8a0109356e9c4ec0234c6a1df579d2f8376369e0d0e227bee00f3ea670e8c27d2e294edc1d010ea151d38e745d7
-
SSDEEP
12288:4Bu6SNL5w0ZpzgWduKGVJFwBq1ItGCT4ed9PJyuU:48thpGMR9hyuU
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
95949e13a7a926f285fe29d15df8386e8e47991461e374f6bcce46b23980d685.doc windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
frmFeedback
JKToolKitGYSizeModule
MassVarModule
JKToolKitM210ModelModule
JKToolKitMillChargeAndSpeed
CMineralToAssay
frmAbout
JKToolKitMorrellPowerModule
SizeDistributionModule
JKToolKitPulpDensityModule
JKToolKitLagranModule
JKToolKitRequiredBMPowerModule
JKToolKitSuperBootStrapModule
JKToolKitRodMillBondWorkModule
JKToolKitRodMillPowerCalcModule
JKToolKitMineralToAssayModule
JKToolKitUnitConversionModule
JKToolKitModule
RandomValues
JKToolKitBootstrapGradeModule
JKToolKitGYErrorModule
Statistics
Usefull
JKToolKitMorrelPowerToolModule
JKToolKitGasDispersionModule
JKToolKitBMPowerDrawModule
JKToolKitResidenceTimeModule
JKToolKitConversionTableModule
JKToolKitFrothRecoveryModule
RecVarModule
JKToolKitRegressionLinesModule