Behavioral task
behavioral1
Sample
20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e.doc
Resource
win10v2004-20240226-en
General
-
Target
20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e
-
Size
301KB
-
MD5
18829dcb73311530d7a19d3f9f2aa22f
-
SHA1
ee4f0099a31c3268e25ac39ff0aa3de34feffc86
-
SHA256
20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e
-
SHA512
5160a95eb0c1d484b1a1198286481d51c1da5fadcc738ee0d592c77fa6cb18055456c959db6b2811dd8a06aeb71c92a4171964fbc5e92902bafb30a42a9ff918
-
SSDEEP
6144:DlqBjW9pkmsct+P5rj43kZx2ESNE3K9vsQT:QWHkmJ+P5H43kZx2ESNE3K9vsQT
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e.doc windows office2003
ThisWorkbook
Sheet1
frmCreate
Support
frmManager
Macros
CADEngine
frmDefaults
ReadRange