Behavioral task
behavioral1
Sample
d47ad0cd5c7fb65d4a76745bc476e2bc470f2cfefd7808f8f8abe869a136fc21.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d47ad0cd5c7fb65d4a76745bc476e2bc470f2cfefd7808f8f8abe869a136fc21.vbs
Resource
win10v2004-20240226-en
General
-
Target
d47ad0cd5c7fb65d4a76745bc476e2bc470f2cfefd7808f8f8abe869a136fc21
-
Size
32.1MB
-
MD5
58855e05331fa0c1ece4e5fc0ef1239a
-
SHA1
cf41c7274a020413448a31d5aaa1e32c177ade50
-
SHA256
d47ad0cd5c7fb65d4a76745bc476e2bc470f2cfefd7808f8f8abe869a136fc21
-
SHA512
9d206dbbd594eabfd0332946ecbf8f4d8e5b8ca2f79b420a9c1afaa4c73e956efbf845afaabaf7eafdca9a94912f476866f172c96f03773dfb6e3e8db820531d
-
SSDEEP
393216:8ri/dqKZ2VihRm4z0eLbj6AVxcdlApAdAyAZTZjR82qtVkrX5mLJ:8rqrYVihRmOhWAVxcdu1jR82P81
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample -
resource yara_rule sample dropper_html
Files
-
d47ad0cd5c7fb65d4a76745bc476e2bc470f2cfefd7808f8f8abe869a136fc21.doc .vbs windows office2003 polyglot
ThisWorkbook
frm_Rpt_Embedded_Info
sTWSChartData
Mod_1_Email_Issues
Mod_ECB_106_Rpts_4
sExecu_Matrix_Powertrain
Mod_ECB_108_Rpts_6
Mod_1_NumLock
sTWSChart
Mod_zXtra_Work
Mod_1_OS_Version
frm_Form4_Reports
Mod_Causal_Factor_Rpt
frm_Execution_Notes
Mod_Execution_Matrix
Mod_Multi_Format_Many_1_Rpts
Mod_zOutside_BSAQ
Mod_Concern_Detail_Rpt
Mod_Forum_Vol_Ratio
Mod_GP_100_Create_Rpt
sHistoricCP_PCA
Mod_Pareto_Sort
Mod_Concern_Detail_Find
Mod_ECB_109_Top20_Whats_Chg
sExecu_Matrix_Veh_Eng
Mod_1_SaveFile_BSAQ
frm_Form_4
Mod_TC_106_Replication
frm_MisBuild_MY_Select
sht_Quality_Update
Mod_PPT_107_ECB_Plant
Mod_TC_107_LReplicationN
Mod_208_QLS_Rpts
Mod_207_Brand_Image_Rpt
Mod_206_Normalized_Misbuild
Mod_204_Quality_Update_To_PPT
Mod_203_Weekly_GQRS_Sort
Mod_201_Monday_AWS_Rpt
Mod_200_Ahmad_Farhat
Mod_PPT_118_Daily_Stop_Ship
Mod_1_Windows_and_Office
frm_Execution_Group
frm_Plant_FVC_Filter
sExecu_Matrix_V00
frm_6Panel_Select
sExecu_Matrix_BodyInterior
sExecu_Matrix_Other
sExecu_Matrix_Chassis
sExecu_Matrix_Electrical
Mod_VRT_Rpt_Format_1
frm_Brand_Image_Select
xfrm_Procedure_Standard
frm_ECB_Top_20_Data_Chk
Mod_GP_121_Multi_Rpts
Mod_Execution_Matrix_3
Mod_Execution_Matrix_2
Mod_GP_122_Data_Fix
sExecu_Matrix_BodyExterior
Mod_6Panel_7_Copy_BlueBoxes
frm_Special_Tools
frm_Special_Reports
frm_ECB_Top_20
Mod_zSpecial_Tools_Code
a_TextCode
Mod_Execution_Matrix_4
Mod_x103_QLS_Campaign_Concern
frm_Bingo_Board_How_to
Mod_ECB_110_MVLP_MY_Delta
sht_TC_Lead_Replication
Mod_6Panel_8_Copy_DP_Manual
sxCCC_Map2016
Mod_205_Contribution_Analysis
frm_6Panel_DP_Language
xMod_Test_Code_Sound
Mod_GP_112_BPR_Macro_1
frm_StopShip_Combine
Sht_Open_Stop_Ship_PDS2
Sht_Open_Stop_Ship_PDS1
sExecu_Matrix_Summary
Mod_1_Delete_Menu_ToolBars
frmOtherReports
frmUserInput
frmWorkingSplash
Mod_Lead_Time_2
Mod_GP_115_AddUsedDefineData
Mod_GMQ_112_Yellow_Sht
Mod_GP_103_3MIS_Rpt
Mod_1_ErrorHandelers
Mod_1_Global
sxSht_FSQR
Mod_1_Version_Type
sECB_Sum_Charts
Mod_1_AddToolBar
Mod_1_MemoryUsage
Mod_1_Shared_Code
Mod_PDS
Mod_R_Y_G_1
Mod_R_Y_G_2
Mod_Forum_Rpt_2
Mod_Closure_Metric_Rpt_2
Mod_1_MQDA
Mod_Whats_Changed_Rpt
Mod_Pareto_Priority_CCC_1
Mod_Form_4_104
sVVS_Stickers
frm_GP_Reports
Mod_Form_4_111_VVPS_Stickers
Mod_1_AddMenu
Mod_1_Show_Kill_Forms
Mod_Lead_Time_1
Mod_GP_116_Combined
Mod_1_Reset_Excel
Mod_1_Hyperlink
Mod_Task_Detail_Rpt
Mod_ECB_103_Rpts_1
Mod_R_Y_G_3
frmRollUpFilter
Mod_One_Pager
frm_OnePager
Mod_Closure_Metric_Rpt
frm_Closure_Calendar
Mod_GP_109_Hide_Show_Charts
frm_Execution_Select
Mod_ECB_107_Rpts_5
Mod_GP_102_Shared_Code
xMod_Find_Text
frm_PDS_Filter
frm_GP_Replication
Mod_Forum_Roll_Up_Rpt
Mod_Stop_Ship_2_On_Site_Mod
sCurrentWoC_PCA
Mod_Pareto_Priority_CCC_2
Mod_1_AddToolBar_Bingo_Board
Mod_TC_101_Format
Mod_Forum_Roll_Up_Rpt_2
Mod_6Panel_4_Desi_Potentia
Mod_1_Admi_Xtra_Stuff
frm_Rpt_Complete
Mod_Forum_Rpt
Mod_PPT
Mod_GP_111_RYG_Rules
Mod_1_AddToolBar_EM
Mod_1_User_Report_Usage
frm_Execution_Vol
sExecu_Matrix_Paint
frm_Pic_Room
Mod_1_PDF
Mod_1_Borders
Mod_R_Y_G_4
Mod_Fwd_Mod_Est
frm_Fwd_Mod
frm_Pareto_Reports
Mod_GP_104_Find_Date_Range
Mod_Pareto_Format_All
Mod_GP_106_Auto_Scale_Cht_Font
Mod_GP_107_3n_TWS
Mod_Stop_Ship_1_PAC_Report
frm_Format_2
frm_Format
frm_Rpt_Complete_W_Msg
Mod_VRT_8C_Rpt
xMod_Non_BSAQ_ECB
Mod_ECB_100_Stickers
sht_Through_Put
Mod_Form_4_105
Mod_1_IE_Data_Test
xMod_SP_FSQR_RY_Status_2
Mod_Form_4_110_Sort_MY
Sht_BPR_Txt
Mod_Form_4_106
Sht_TopSupplier_3rd
sht_QPIP_Global_Summary
Mod_6Panel_5_Form4
Mod_GP_110_RYG_Add_StatusBox
Mod_TC_105_xDate
sht_QPIP_Regional_Summary
Mod_GP_113_BPR_Macro_2
sExecu_Matrix_sFunction
Mod_Forum_Roll_Up_Rpt_3
Mod_1_Input_Form_Code
Mod_VRT_Rpt_Format_2
Mod_1_All_Public_Variables
Mod_Form_4_109_PCAI_Shading
Mod_Form_4_101
Mod_Form_4_102
Mod_Form_4_103
Mod_GP_118_Through_Put_DB
Mod_210_Plant_Analysis
frm_Info
Mod_GP_114_New_Chart_Code
Mod_GMQ_128_Reliability_Catalog
Sht_Travel_Est
xfrm_Data_Compare
Mod_211_Plant_Analysis_2
Mod_x101_Karry_Roberts
Mod_1_Convert_Name_Template
frm_Form_4_Sort
frm_Form_4_Select
Mod_1_Track_Changes
frm_WhatsChanged_Splash
Mod_GP_108_Chart_Grouping
frm_Excel_Open
frm_Time_Est
frm_VL_Missing
Mod_1_Sys_Memory_Chk
frm_Report_Info
Sht_TopSupplier_Rpts
Sht_TopSupplier_Unique
Mod_Top_Supplier_1
sht_VEM_Veh_Chart
Mod_Pareto_Names
frm_Prog_Qual_Dashboard_Select
frm_Pareto_Names
frm_Stop_Ship_Rpts
Mod_PDI_Summary_Slides
xMod_SP_FSQR_RY_Status
Mod_1_Ribbon
Mod_GMQ_111_Design_Potential
Mod_Pareto_Combine
frm_Pareto_Combine
Mod_6Panel_3_CA
Mod_GMQ_107_ProgQualDashboard
frm_EWI
Sht_SYNC_1Chart
Sht_SYNC_Chart_Table
frm_PPT_EM_One_All
mod_Test
sht_VEM_Reg_Chart
sht_VEM_VFG_Chart
Mod_2041_ECB_6wks_Summary_Rpt
frm_6Panel_Add_Rpts
sht_EWI_Dashboard
Mod_x107_Super_Duty_Analysis
frm_Insight_Region_Select
Sht_VFM_LU
Sht_WSAQ180
xFrm_FSQR_Edit_Names
BSAQ_Blank
Mod_6Panel_1
frm_Through_Put_Filter
Mod_6Panel_2
frm_6P_Adjust_Chart
Mod_ECB_101_Rpts_Save
frm_PPT_Save_As_Name
frm_PPT_Complete
frm_PPT_File_Add_Complete
Mod_Bingo_Boards
Mod_209_UnNormalized_Misbuild
xfrm_DCP_Interface
frm_GP_Combine
Mod_GP_105_Copy_Charts_Scale
Sht_KAOF_Veh
frm_KAOF_Filters
frm_KAOF_RYG_Status
Mod_KAOF_1
Mod_KAOF_3_Veh
sxSht_CA_Chart
Mod_KAOF_4_Veh_Function
Mod_KAOF_5_Function_Veh
Sht_KAOF_Func_Veh
Sht_KAOF_PPT_Template
Mod_KAOF_2
Sht_KAOF_Veh_Func
Mod_KAOF_6_PPT
sht_Activate_BSAQ_Macro
Frm_BSAQ_Help
Mod_Date_Diagnostics_Rpt
Mod_Pareto_Form4_RYG
frm_QA_Warning
Mod_ECB_102_Form4_RYG
frm_ConcernDetail_StopShipPAC
Mod_zSharePoint
sht_VEM_Data
Mod_KAOF_3
Mod_PIC_Board_Org_Chart
Mod_Concern_Impact_Rpts
Mod_1_Print_Format
Mod_Launch_Spike_Rpt
Mod_1_Rpt_Filters_Top
frm_BSAQ_Code_Development
sExecu_Matrix_sVFG
Mod_Stop_Ship_4_15_Days
Mod_TC_102_RollUp
Mod_GP_119_Replication_Rpt
Mod_Special_Tools_Code
frm_PPT_Create
frm_Top_Concern_Supplier_Rpt
Mod_TC_103_Supplier
Mod_1_Regional_Settings
Mod_GMQ_108_Visual_EM
sht_PQD_LU
frm_Prog_Qual_Dashboard_Data
sht_PQD_ALL
Mod_PPT_101_6P
Mod_Form_4_107_Combined
Mod_6Panel_6_Top_Cost
xfrm_DCP_Rpts
frm_Form4_Combined
sxCCC_Map
Mod_Execution_Matrix_1
Mod_Stop_Ship_5_Combine
Mod_Form_4_108_Comb_PER_Sticker
frm_VEM_Filter
frm_Pareto_Metric
Sht_Open_Stop_Ship_PDS
Sht_Open_Stop_Ship_RG
Sht_Open_Stop_Ship_Count
Mod_Stop_Ship_3_Open_Charts
Sht_TopSupplier_Hot_Sht
frm_Top_Supplier_Add_Rpt
Mod_ECB_104_Rpts_2
Mod_ECB_105_Rpts_3
Mod_GP_120_Lead_Replication_Rpt
sht_GP_Lead_Replication
frm_GP_Lead_Replication
Mod_x102_DCP_Tracking_Tool
Mod_Pareto_Detail_Lite_Add
sxSht_DCP6
Mod_1_Help
sxSht_DCP8
sxSht_DCP7
sxSht_DCP5
frm_Pareto_Lite
Sht_PDI
frm_Top_Concern_Rpts
Mod_TC_104_Supp_Recov
szSht_Track_Changes
xfrm_DCP_Status_Update
Sheet1
Sht_Design_Potential
xMod_Test
Mod_x104_Sue_Desmet
Mod_1_BSAQ_Access
Sht_DP_Summary
frm_UnNormal_MisBuild_MY_Select
frm_6Panel_Design_Potential
frm_6Panel_DP_Help_Old
Mod_GMQ_104_Combined_Pareto
frm_Find_BSAQ_Macro
sht_VEM_Func_Chart
frm_VEM_Select_Model_Yrs
sht_GPA_Counts
Mod_Form_4_112_SARS_Stickers
Mod_PPT_102_FPCA
Mod_PPT_106_GCM_EM
Mod_zOutlook_Code_Samples
frm_VEM_Data_Select
sxSht_CA_PT_LU
Mod_GMQ_103_Sort_CP_Func_VFG
Mod_GMQ_105_Early_Warning_Indi
Mod_1_Picture_Viewer
Mod_1_Macro_How_To_Help
frm_Macro_How_To_Help
frm_Picture_Viewer
Sht_Image_Viewer
frm_6Panel_Add_Team_Member
Mod_1_SharePoint_Code
Mod_1_QAT_Code
Mod_1_User_Access
Mod_x105_CPU_Forecast
Mod_PPT_105_Par_TC
Mod_1_Functions
Mod_1_Find_BSAQ_Macro
Mod_1_Email_Auto_Outlook
Mod_GMQ_106_Feasability_Study
zfrm_Menu
Mod_GP_123_Multi_MYTD_Status
sht_GP_MYTD_Status
sECB_GQR_Sum_Charts
Mod_1_PC_Power_Mgt
Mod_Multi_Format_Many_2_DP_Rpts
Mod_1_Web_Page
Mod_1_PC_Information
Mod_212_DA_Insight_Email
sht_GPA_R1000
sht_GPA_CPU
sht_GPA_TGW
Mod_x106_BlackBelt_Review
Mod_GMQ_101_MYTD_Status
Mod_GMQ_102_Execution_Matrix
Mod_PPT_100
Mod_PPT_103_SARS_Stick
Mod_PPT_104_ECB_SARS_Stick
Mod_1_BtnToolBar1
Sht_6Panel_Pg1
Sht_6Panel_Pg2
Sht_6Panel_Pg3
Sht_6Panel_Pg4
Sht_6Panel_Pg5
Sht_6Panel_Pg6
Sht_6Panel_Pg7
Sht_6Panel_Pg8
Sht_6Panel_Pg7v
Sht_6Panel_Pg10
Sht_6Panel_Pg10v
Sht_6Panel_Pg11
Sht_6Panel_Pg9
Sht_6Panel_Pg12
Sht_6Panel_Pg13
Sht_6Panel_Pg1_1
Sht_6Panel_Pg1_4CPU
Sht_6Panel_Pg1_3R1000
Sht_6Panel_Pg17
Sht_6Panel_Pg18
Sht_6Panel_Pg1_2TGW
Sht_6Panel_Pg20
Sht_6Panel_Pg21
Sht_6Panel_Pg14
Mod_PPT_108_SYNC_Analysis
Mod_x108_Harry_ECB_Top20_Detail
frm_ECB_Bin_Paynter_Rpts
Mod_GMQ_110_Global_Contr
sht_GP_GVR_LookUp
sECB_WAR_Sum_Charts
sht_PDS_Region_Summary
sht_PDS_Region
Mod_GP_125_PDS_Global_Contri
frm_GP_PDS_Global_Contri
sht_VL_LU
Mod_ECB_111_Detail_to_Paynter
Mod_TC_109_Activity_Rpt
sht_TC_Proj_Activity
frm_Prog_Qual_DB_Family
xfrm_GMQ_Travel_Tracker
Mod_PPT_126_Yellow_Sht
Mod_GP_127_RYG_Error_Box
s3MISChart
s3MISChartData
frm_Top_Concern_Activity
frm_Prog_Qual_DB_Previous_New
Mod_GMQ_113_PQD_Copy_Previous
Mod_TC_110_Wkly_Activity_Rpt
sht_TC_Weekly_Activity
frm_Top_Concern_Weekly_Activity
frm_Top_Concern_WA_Combine
Mod_1_Array_Sample
frm_Yellow_Sht
sht_Yellow_Sheet
Mod_GMQ_114_MYTD_MOP_Insight
sht_Insight_MOP
sht_Insight_MYTD
frm_Insight_Contrib_Analysis
Mod_1_UserForms
Mod_ECB_112_MVLP_VFG
Mod_ECB_113_Paynter_2MOP
frm_ECB_Paynter_2MOP_4MOP
sxVFG_List
frm_Multi_Rpt_Format
frm_6Panel_DP_Help
Mod_GMQ_115_Causal_Factor
Sht_GMQ_CF_Template
Mod_PPT_109_GMQ_Causal_Factor
frm_Causal_Factor_Spcl_Attn
frm_Causal_Factor_Update_VFGs
sht_Causal_Factor_VFGs
Mod_1_Print_Preview
frm_ECB_Paynter_2MOP_Top5
frm_Causal_Factor_Adj_TxtBoxes
Mod_zResolution_Testing
Mod_GMQ_118_Waterfall_2
xFrm_Marc_Burnia
Mod_x109_Sort_Sheets
frm_Waterfall_Data_Links
Sht_WF_Function
Sht_WF_Vehicle
Mod_PPT_110_GCM_Waterfall
frm_Waterfall_Data_Input
frm_Waterfall_Interface
Mod_213_LDP_Automation
Mod_GP_128_Transit_F74
Sht_ImportVsExport
Mod_GMQ_117_ImportVsExport
Mod_PPT_111_ImportVsExport
Mod_214_Func_Qual_Drill_Dn_Rpt
frm_GP_F74_Data_Links
sht_GP_F74_Calc1
sht_GP_F74_Calc2
Mod_215_VOCF_Panyter_Sht_AIMs
Mod_ECB_114_Canada_Summary
xMod_Check_VBA_Proj_Trust
Mod_GMQ_116_BPR_Waterfall
Mod_Form_4_113_Combined_ReSort
frm_Form4_ReSort_Metric
frm_ECB_W_MVLP_Hide_Show
frm_Form4_Comb_Hide_Show
Sht_Waterfall_2
frm_Func_Qual_Drill_Dn
frm_Waterfall_2_Data_Links
Mod_PPT_112_GCM_Waterfall_2
Mod_GMQ_109_SYNC_Analysis
cCalendar
frm_Calander
frm_Func_Drill_Dn_Data_Links
sht_DD_VFG_CCC_VL
sht_DD_Reg_Func
sht_DD_Func_VFG
Mod_PPT_113_Q_Func_DrillDn
Mod_6Panel_9_GlidePath
Sht_6Panel_Pg19
Sht_6Panel_Pg11v
Sht_6Panel_Pg13v
Mod_PPT_114_Canada
Mod_GMQ_119_VOME_Rpt
sht_VOME
frm_VOME_Metric_Select
Mod_PPT_115_VOME
Mod_ECB_115_Compare_Rank_RD
Mod_GMQx_101_Dash_Board
Mod_PPT_124_Basic_One_Sht
Mod_GMQ_120_SAR_Automation
Mod_GMQ_121_Bingo_Board_Auto
Mod_1_Key_Board_Language
Mod_Stamping_DataBase
frm_Bingo_Board
frm_ECB_Compare
Mod_PPT_116_BingoBoard
frm_Bingo_Board_Compare
Mod_GMQ_122_Obj_Delta_GP
frm_MQDA_3MIS_Delta_Obj
Mod_QPIP_3_Mgt_Rpt_Chart_Color
sht_QPIP_BlueBar_Region
sht_QPIP_BlueBar_Plants
sht_QPIP_RYG_Assy
Mod_GMQ_123_Daily_Stop_Ship
Sht_StopShip_Daily
Chart_Misbuild
Mod_6Panel_1_1
Mod_x112_Travel_Estimate_Danna
zExport_Import_Modules_Frms
Mod_ECB_105_Rpts_3_1
Mod_PPT_101_Format_Other
sht_QPIP_RYG_PT
sht_QPIP_RYG_Stamp
sht_Causal_Chart
xMod_100_Software_List
Mod_PPT_119_Causal_Factor
Mod_GMQ_124_REDCRS
Mod_1_SaveFile_Ouside
Mod_1_Date_Code
Mod_PPT_120_Form4
Mod_PPT_121_PIC_Board_Org
Mod_x110_Strip_Email_Name
Mod_PPT_128_HTIS_All_Regions
Mod_x111_Sterling_Axle_Macro
Mod_PPT_122_Stop_Ship_Automat
frm_Stop_Ship_Global
xMod_Mouse_Control
xfrm_Keep_Active
xMod_Keep_Active
frm_Stop_Ship_Auto_Rpts
Sht_HTIS_Chart
Mod_PPT_123_Dom_Exp_SS_ITSS
Mod_QPIP_0_Reports
Mod_QPIP_1_Managment_Rpt
Mod_QPIP_2_Chart_Data
Mod_PPT_117_QPIP_Mgt
Mod_Form_4_114_Copy_Comments
Mod_1_User_Preference
xfrm_Wack_A_Mole
zMod_Marc_Burnia
Mod_PPT_125_Priority_CCC
Mod_x113_GMQ_Travel_Kristen
Mod_1_Screen_Pixel_DPI
Sht_Sterling_Template
Sht_Sterling_Objectives
Mod_PPT_0_Link_File_To_PPT
mod_1_PW_Breaker
Mod_GMQ_127_FTT_EOL_MOP
sht_FTT_EOL
Mod_Form_4_115_Limit_6months
Mod_GMQ_128_xbasInterface
Mod_GMQ_128_xbasLSQ
Mod_GMQ_128_xbasNelder_Mead
Sht_Reliabiltiy_Catalog
frm_Reliability_Catalog_Chk
frm_HTIS_Forecast
Mod_GMQ_129_China_Cut_Off
Sht_China_CO_Chart
Mod_PPT_127_China_Cut_Off
Mod_GMQ_130_PRA_Rpt
frm_China_CO_MY_Select
Mod_GMQ_131_HTIS_ALL_Regions
Mod_GMQ_125_Stop_Ship_Automatio
Mod_GMQ_126_Dom_Exp_SS_ITSS
frm_Stop_Ship_Domestic_Export
Mod_x114_PAC_PRA_Rpt_Ed_Smith
Mod_x114_PAC_PRA_Rpt_Original
Mod_1_Speaking_Samples
Sht_Stop_Ship_PRA
frm_PRA_Reports
Mod_Stop_Ship_6_PRA
Mod_Stop_Ship_7_Data_Comparison