Behavioral task
behavioral1
Sample
dd1cdc54ffeda1cbb365292aee4b020dc11d9a80c91667e19a5d5ee9872cb0b8.doc
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
dd1cdc54ffeda1cbb365292aee4b020dc11d9a80c91667e19a5d5ee9872cb0b8.doc
Resource
win10v2004-20240226-en
General
-
Target
dd1cdc54ffeda1cbb365292aee4b020dc11d9a80c91667e19a5d5ee9872cb0b8
-
Size
301KB
-
MD5
955354491dec7eaecbd84bc1b72e9e47
-
SHA1
3f6f9253f7188204095ad2d26b01492501ad0dad
-
SHA256
dd1cdc54ffeda1cbb365292aee4b020dc11d9a80c91667e19a5d5ee9872cb0b8
-
SHA512
f29b0b4f0834a7d4c43f52637365a01a5741e07e7cf72792ee8e0726bb6bc3b389e406f2a02d9cc030f9a9952e4fedf2d9705b39da052a4026879b5420076e46
-
SSDEEP
6144:2j7mtFt+P5r4lqBjNpLjhQLZ4w/e8HMi9Ul:Q7mp+P5VNpLjhQLZ4w/e8HMi9Ul
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
dd1cdc54ffeda1cbb365292aee4b020dc11d9a80c91667e19a5d5ee9872cb0b8.doc windows office2003
ThisWorkbook
Sheet1
frmCreate
Support
frmManager
Macros
CADEngine
frmDefaults
ReadRange