Behavioral task
behavioral1
Sample
b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82.vbs
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82.vbs
Resource
win10v2004-20231215-en
General
-
Target
b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82
-
Size
74KB
-
MD5
867689a2287adcf8a7bd667dbfad81fe
-
SHA1
5d0119eda2db4e7fc7385f00c785f8b9f199e0ca
-
SHA256
b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82
-
SHA512
5ffffe4df35a0f22ff2c159eb8c795bd7cd5b904084cbda9ecfbe70bce1c2811e2d892935ca824ffc249497ef2f081e55475797be989f7c3da2017fa723aa431
-
SSDEEP
1536:bx5rfZ9PyLoY6WP5l9RYHjUoiqiPlB0txc1Ymb8ESQjWD6UGg9Sma1Wp0:bx5rfZ9PyLoY6WP5l9RYHjXtiPlBoW1Y
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82.doc .vbs windows office2003 polyglot
ThisDocument
Module1
NewMacros