Behavioral task
behavioral1
Sample
e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506.xls
Resource
win10v2004-20240226-en
General
-
Target
e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506
-
Size
1.4MB
-
MD5
721dff13612994fa405b912495018513
-
SHA1
301712a2192e0390d0de51ca6ab58381cfee9b2e
-
SHA256
e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506
-
SHA512
417ac020fffe047c040b2319cbb12b1fe440eca5957a81a736bf9e65fbe62a1a7684e7873482eff3a589b08df8ac3b48782abde9c6e60c5e3389245d784089b7
-
SSDEEP
24576:4GnMbwTR/AUqao+HF8t66WYmntqRfGE62pY+Vh1aYjazNhH1hqx5PILmRbC1+Y+:7kwTRZFM2qRv
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506.xls windows office2003
ThisWorkbook
PopulateProfilesDropDownModule
QUERIESErrorsTrap
frmDateChangeThree
ConvertCurrencytoWords
SUMSubTotalingNotCrossTab
QUERIESSetSQLStringModule
FINDAmortizationScedule
QUERIESObtainTablesandColumns
UNIVERSALMacros
InsertRowWithinNamedRange
FunctionsCalledFromWithin
QUERIESFormatSQLResults
MISCFindZeroCombinations
frmHelpSystem
ALTERComplexDataFillIn
AAAPublicVariables
SUMSubTotalInPlace
QUERIESOpenPivotTableQuery
SUMCalculateAlwaysOn
ALTERSortBasedOnColor
QUERIESRemoteExecution
Sound
ALTERSortNineModule
QUERIESSQLViaADOObject
QUERIESSQLViaQueryTableObject
frmExecuteSQLStatement
CLEANMinorMacros
SUMSubTotalingCrossTab
SwapMouse
frmAmortization
FunctionsNotUsed
frmColorSort
frmMaintainConnectionProfiles
FormStarters
Sheet01
FINDFileListingCode
frmDateChangeFour
ALTERDateConverter
QUERIESSetConnectionModule
HELPAuthorized
PasswordBreaker
FINDAccessConnectionStrings
OpenProtectedWorkBook
QUERIESExampleProfiles
frmDateChangeTwo
VideoHelp
frmFlipSigns
frmConvertASCIICharacters
FINDBuildSearchList
SUMMinorMacros
FUNTIONSFunctionWriter
frmDateChangeOne
frmPivotTablesGetData
frmSortNine
frmHelpAbout
TheDataWandBuilder
CallingTheHelpFile
FINDAutomatedComparrison
FINDMarkExactInOutInBue
frmNoPermission
frmComplexFillInMessage
modRecycleVBA
SUMCount
ClassConnectionProfile
frmObtainAuthCodeInuptBox
LISTSMinorMacros
FINDMinorMacros
MISCMinorMacros
HELPMinorMacros
QUERIESMinorMacros
ALTERMinorMacros
QUERIESBuildTabsAndExecute
ClassSetCopyRowAndColumn
HELPCreateModules
Version14AndAbove
ALTERTranspose
frmHelpApplyRoundingFunction