Behavioral task
behavioral1
Sample
28490977f9917189a103fcfe9b3550e0e65ee470e226fc4701cf57a54557a22b.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28490977f9917189a103fcfe9b3550e0e65ee470e226fc4701cf57a54557a22b.doc
Resource
win10v2004-20240226-en
General
-
Target
28490977f9917189a103fcfe9b3550e0e65ee470e226fc4701cf57a54557a22b
-
Size
301KB
-
MD5
24755d9b827424b6f667aa4d8cee8ba0
-
SHA1
d3af2d54cee2cb1c98eaf28f995724d06788d61e
-
SHA256
28490977f9917189a103fcfe9b3550e0e65ee470e226fc4701cf57a54557a22b
-
SHA512
aa206e162c5ba1969720a9941d12b8f5806b25ba0b50c3dbcd7d0d2f0e06e8dd2df25eab4dab7bcace4a69763ed3f1694f1813fd4870f54eb4be1c781ca67a70
-
SSDEEP
6144:Zj7mtFt+P5r9lqBjWXLjktLUNhvQQUO4sUl:d7mp+P5GWXLjktLUNhvQQUO4sUl
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
28490977f9917189a103fcfe9b3550e0e65ee470e226fc4701cf57a54557a22b.doc windows office2003
ThisWorkbook
Sheet1
frmCreate
Support
frmManager
Macros
CADEngine
frmDefaults
ReadRange