Behavioral task
behavioral1
Sample
3786627fe9b003816332675aae8952152b4b9219c0a5df46495a03551cf20376.doc
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3786627fe9b003816332675aae8952152b4b9219c0a5df46495a03551cf20376.doc
Resource
win10v2004-20240226-en
General
-
Target
3786627fe9b003816332675aae8952152b4b9219c0a5df46495a03551cf20376
-
Size
4.6MB
-
MD5
fd074fede9b7536ea93385bca52d3323
-
SHA1
7757a5a0c1d2170635a7377a372f6176bebbbc0c
-
SHA256
3786627fe9b003816332675aae8952152b4b9219c0a5df46495a03551cf20376
-
SHA512
da029ab73c20d89481a6a283c62908fb20ee89a5a58cc2e42e1366a41e27105efb15095636b765ddb207ddf6d6a286d600c622240c92e54b700e046f47cb5c22
-
SSDEEP
49152:G2i/nbhfD7/kocIjzNgv17wth4Dv/nE/vWWx/J/IdrAywTuxqEZ:G2EfX5cIjz6Dz/E/vWWx/J/IdrgTG
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3786627fe9b003816332675aae8952152b4b9219c0a5df46495a03551cf20376.doc windows office2003
ThisDocument
ModuleImporter
BBPTv2_clsAppEvents
BBPTv2_clsExcelLinkApp
BBPTv2_clsExcelLinkHandler
BBPTv2_clsExcelLinkWbk
BBPTv2_clsFileDeletionQueue
BBPTv2_clsLink
BBPTv2_clsLinkInfo
BBPTv2_clsLinks
BBPTv2_clsLinkShape
BBPTv2_clsQueue
BBPTv2_FileHashingFunc
BBPTv2_modExcelLinkHandler
BBPTv2_modPasteFromExcel
BBPTv2_modUtility_Word_New
BBPTv2_SupportFloatingShapes
BBPT_clsAppEvents
BBPT_clsExcelLinkApp
BBPT_clsExcelLinkHandler
BBPT_clsExcelLinkWbk
BBPT_clsLink
BBPT_clsLinkInfo
BBPT_clsLinks
BBPT_clsLinkShape
BBPT_modCallbacks
BBPT_modConfig_Word
BBPT_modEditPaste_Word
BBPT_modErrorLog
BBPT_modExcelLinkHandler
BBPT_modLocalize_Word
BBPT_modPasteFromExcel
BBPT_modUtility_Word
BBPT_modUtility_Word_New
BBPT_WordSections
ChartManager_OFCUI
ChartsControlEventHandlers
ChartsEventsHelper
ChartsHelper
frmMsgBox
frmSections
Globals
Helpers
HelpMenu
modConstants
modDD
modDDFindReplace
modDDFunctionBuilder
modDDRefDataService
modNewFunctions_Word
RegistryHelper
RegOp
TestPriorityQueue
ToolProxy
ToolsEntryPoints
V3Status
Visualization
XMLHelperTools
BBPTv2_FunctionTracing
ApiRegistry
APIRegistryUtil
ComDllLoader
SettingsUtil
BOF_Core
BOF_Hash
BOF_Json_Utility
Mod_Metering
OFCMSG_Hash
OFCUI_Event
OFCUI_HostContainer
OFCUI_HostLtc
OFCUI_Tests
OFC_TaskPaneInterface
OFC_Utils
ToolsEntryPoints_Shared
FileManagerHelper
BBPTv2_clsPriorityQueue
BBPTv2_LinkManager_Logger
BBPTv2_modCommonPasteFromExcel
BBPTv2_modCommonUtilities
BBPTv2_modCommonWPFLinkManager
BBPT_ZombieUtils
ModuleImporterHash