Behavioral task
behavioral1
Sample
5f81cd17f3f4a235533c0289e60a26ed1cd4d5a6f07aa58af67f2d7d8f3706a0.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5f81cd17f3f4a235533c0289e60a26ed1cd4d5a6f07aa58af67f2d7d8f3706a0.doc
Resource
win10v2004-20240226-en
General
-
Target
5f81cd17f3f4a235533c0289e60a26ed1cd4d5a6f07aa58af67f2d7d8f3706a0
-
Size
184KB
-
MD5
7d2cee8ed7f1c2b2f0c6819203eb9eae
-
SHA1
0c211f45efe23dffa1693853bf14951036ef9444
-
SHA256
5f81cd17f3f4a235533c0289e60a26ed1cd4d5a6f07aa58af67f2d7d8f3706a0
-
SHA512
8b35b2a8ec12bb03f28a34511339721c1246e4be1238f0668f110dafec420347b774eb17281922b9a37746416b27befcdb5a90d6b6bcf1d58ead15e23848ac8d
-
SSDEEP
3072:z4pLVZFwYVNxToGChpLsDb7sKzVCE16i351kVwowvCrgnySiJTDNk40dX9+J9EbC:G16i35wgWqJH7+u/FUq
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
5f81cd17f3f4a235533c0289e60a26ed1cd4d5a6f07aa58af67f2d7d8f3706a0.doc windows office2003
Main
Stream
Column
Hxrig
DDELink
Object Edit
ThisWorkbook
Sheet1
Sheet2
Sheet21