Behavioral task
behavioral1
Sample
8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba.doc
Resource
win10v2004-20240226-en
General
-
Target
8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba
-
Size
269KB
-
MD5
05f913f63647836dc284fc6bb6611712
-
SHA1
9ed3fc3e7d177f6bae8c237b4e332cf356deffb3
-
SHA256
8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba
-
SHA512
1cb7da3619f43a201df9ad182a3a08da98c9c4fa3228e05a2f74f410d056d0eb0aaca2e0c8a446ec92779c9b4fd1ae703a795916be44925d7533f6efa3c5d676
-
SSDEEP
3072:YE4plzqKYwrdjhjK8vMU3EG/TG13ZvdXppi6iMpGpKXW3Qapc7o8hxPgpMmgppO:klzzYw2GLG7lpTGpKFapc7o8hxkMNpO
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba.doc windows office2003
Sheet20
ThisWorkbook
Sheet17
AboutGWSDAT
GWSDATAdmin
LicenseForm
DisclaimerAcceptForm
DatatoCSV
DisclaimerForm1
ConfigParams
GWSDAT
GWSDATOptions
Sheet1
Sheet19
RLibsAdmin