Behavioral task
behavioral1
Sample
ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324.doc
Resource
win10v2004-20240226-en
General
-
Target
ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324
-
Size
269KB
-
MD5
e5430b1c263753db4019ae57db14d4ff
-
SHA1
d105447de8b399da0da0563fdc026ea57d39b831
-
SHA256
ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324
-
SHA512
4ef4ee71b1f36ad5566eb35c8eb06d4de28996aa9537ff3f9546ec236ff9cff546913c8adaa708abfb6acc80511b07c9d6200581e44247d0eb3707f900f159db
-
SSDEEP
3072:aE4plzqKYwrdjhjK8vMU3EG/TG13ZvdXppi6qMpGpKXW3QayCwo8oMPgpDmgppq:ulzzYw2GLG7lp7GpKFayCwo8oMkDNpq
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324.doc windows office2003
Sheet20
ThisWorkbook
Sheet17
AboutGWSDAT
GWSDATAdmin
LicenseForm
DisclaimerAcceptForm
DatatoCSV
DisclaimerForm1
ConfigParams
GWSDAT
GWSDATOptions
Sheet1
Sheet19
RLibsAdmin