Behavioral task
behavioral1
Sample
3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84.doc
Resource
win10v2004-20240226-en
General
-
Target
3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84
-
Size
8.9MB
-
MD5
5d6c692e50b5cf4cd7afa59222b785a6
-
SHA1
cb499b434c63b9deb4f9fbe1c58b3719376d21f6
-
SHA256
3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84
-
SHA512
25d5eee973c448e5a5afb83401d6d1cd46e0b93c42333646585853ffb804934398a74233a183eaccd3c2f1d28328ad1ae965a3bf52ce223a0837afc9c005fce3
-
SSDEEP
49152:+u3MpJY7iIER2vqf3QSPN40mu1wzZfQgfU8lQvJBYng2MGu+uK9uJvVJmegQSe/h:yYW1LAHHo9fYYYW
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84.doc windows office2003
frmOptions
FrmStickyNote
ChainMachineSelector
ClientMachine
DraftNote
frmFormatPicker
FrmAbout
FrmAngleAdjustment
frmReleaseNotes
FrmConvertSettings
FrmMasterElements
FrmHarveyBall
FrmHelpMessage
FrmMigrator
FrmProperties
FrmReapplyStyles
FrmResetSlideTitle
Language_Switch
frmMergeTextboxes
RoadmapCheck
Agenda_Wizard
WFileDialog
TableMachineMenu
TableReformat
FormatPropertiesCollection
FormatProperty
Footnote
qpt_colorscheme
AcnMain
FrmDeleteEmptyPlaceholders
AcnRepair
AcnShapes
AcnTables
libTools
QPT_Constants
QPT_MenuFile
QPT_MenuInsert_MasterElements
QPT_MenuInsert_ValueChain
AcnTemplates
QPT_SendSlides
QPT_MenuTools
qpt_onStartup
QPT_FormatCopier
QPT_ShowUserForms
QPT_Tools
ScreenFlick
FrmEcken
QPT_CustomUI_Callbacks
AcnTools
libShell
QPT_MenuTools_AgendaWizard
QPT_RibbonComands
frmAdmin
QPT_ColorPicker
frmCleanUp
RibbonEventHandler
MausIcon
libMCTool
StampMachine
frmActionTitle
frmSubTitle
libFunctions
frmAgendaRGB
Authors
frmConfidential
ChartTitleMachine
frmRoadmap
Verschiedenes
FrmDivider
FrmRemoveDoubleBlanks
Open_Template
zzzzz
FrmAgenda