Behavioral task
behavioral1
Sample
dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663.doc
Resource
win10v2004-20240226-en
General
-
Target
dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663
-
Size
148KB
-
MD5
84c85a3bda18d0b0e49d58bd434b0bea
-
SHA1
1fab754823d386422ef597577c920a4bc0f02fbf
-
SHA256
dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663
-
SHA512
64efc3b72d0ecaf51596c7baa8da43784186170adee0c2b995080b0bd2529cdce01a8615039465769214ff806c936c38bf525577e477d487b3ac8af8e8695f8f
-
SSDEEP
3072:GTxSKCtVEH+b+hq7VuJuH7ru/YD+C7jZvRyJ7Zb9SdC4v:GTcKCtVEBuV4uqYD+8yJZhSF
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663.doc windows office2003
ЭтаКнига
Лист3
SAP_ZRD_279
Formatting
Start
TXTinExcel
initialize
Лист4
Saves
Лист31
Лист1
Doubles
Automate