Behavioral task
behavioral1
Sample
ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43.vbs
Resource
win10v2004-20240226-en
General
-
Target
ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43
-
Size
487KB
-
MD5
e4d4159c64fd5b4d0ef2611c3fdc7a6d
-
SHA1
583a2ceb1c3f45040904c13b308331b287212b1d
-
SHA256
ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43
-
SHA512
e92cb9e3de73a3f1937caaec3c30efdac09ac7635e61ecf8677d36d49b240a0bac0dbef8c2a945cc02431aae3a2416dcf3c987ac816b68d195ed1d485017fdff
-
SSDEEP
12288:X5VTAn6kKEEePbfm3l1lP/SJ++hs4aajBSGy/qo4:pVcn6kKEEePbfY1NSJ++hs4aajBSZ/q7
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43.doc .vbs windows office2003 polyglot
ЭтаКнига
frmTibur
modChFormat
Лист6
clsChartEv
frmArch
frmSelTypes
frmPW
Лист4
frmMacroStart
frmLab
frmChFmtView
Лист5
frmRepSets
modStress3