Behavioral task
behavioral1
Sample
0f324acdee554f2f378d708f773f49f36b38c5b4f2a5daaf2b4437d889603f3b.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f324acdee554f2f378d708f773f49f36b38c5b4f2a5daaf2b4437d889603f3b.xls
Resource
win10v2004-20240226-en
General
-
Target
0f324acdee554f2f378d708f773f49f36b38c5b4f2a5daaf2b4437d889603f3b
-
Size
1.6MB
-
MD5
46c1c884e100d25e99f202fd6135ef40
-
SHA1
6416f785771f48bb9a28ce207afa84180552b8e4
-
SHA256
0f324acdee554f2f378d708f773f49f36b38c5b4f2a5daaf2b4437d889603f3b
-
SHA512
0966205e84377e8b13d4a3fbbd630a00c2646a52449208f01ed1a7d745e81d1281c767397f0a3ce67b1c14cbaeb5b8d0d3901048d2a7b8040e25f871aa044522
-
SSDEEP
12288:ZZTZiTQaheS8YLcdMzctKUeYqogkjSITea:sTyCcVlQCea
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0f324acdee554f2f378d708f773f49f36b38c5b4f2a5daaf2b4437d889603f3b.xls windows office2003
Main_Module
ThisWorkbook
Sheet42
Sheet28
Sheet39
Sheet14
Sheet8
Sheet9
Sheet27
Sheet1
Sheet32
Sheet36
Sheet25
Sheet2
Load_TOC_Module
Sheet46
Sheet19
Sheet11
Sheet7
Sheet6
Sheet3
Sheet15
Sheet18
Sheet17
Sheet16
Sheet21
Sheet24
Sheet23
Sheet22
Sheet26
Sheet12
Sheet34
Sheet35
Sheet13
Sheet10
Sheet20
Sheet29
Sheet30
Sheet31
Sheet37
Sheet38
Sheet4
Sheet40
Sheet41
Sheet43
Sheet44
Sheet45
Sheet5
Move_sheet_Module
Get_and_New_Sheet_Module
Sheet47
Sheet48
Sheet33
Sheet49
Sheet50
Sheet51
Sheet52
Sheet53
Sheet54
Sheet55
Sheet58
Sheet56
Sheet57
Sheet59
Sheet62
Sheet61
Sheet60
Sheet63
Sheet66
Sheet65
Sheet67
Sheet68
Sheet64
Sheet69
Sheet70
Sheet71
Sheet73
Sheet72
Sheet74
Sheet75
Sheet76
Sheet77
Sheet78
Sheet79
Sheet80
Sheet81
Sheet82
Sheet83
Sheet84
Sheet85
Sheet86
Sheet87
Sheet88
Sheet89
Sheet90
Sheet91
Sheet92
Sheet93