Behavioral task
behavioral1
Sample
5205d4d9e98c1b6b544b7decdd61777232b4573b1742fee90c25123b47752161.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5205d4d9e98c1b6b544b7decdd61777232b4573b1742fee90c25123b47752161.doc
Resource
win10v2004-20240226-en
General
-
Target
ec5ef79f5cbf5107088736eb37ef91d6.bin
-
Size
106KB
-
MD5
e7d692574486fa2dace2e5be51694bd0
-
SHA1
adfe82e2857c465855467616539dda7d7fdf26c8
-
SHA256
94fcc86840d13fec66a993562c04e1b98938a1bdbeb1c77cb968304722025469
-
SHA512
1c5fef9f73415568648c52a93b840463f1a616ceb6d2f21f358bf7750899a289951746c6c520a2cf19ad0073d95b77abe76f2a3283002617050b63903206a124
-
SSDEEP
3072:LVb9CwkKvcPh163BgsfuLANBpTox5dALACarc:/dkKUPMBgsmm6joACarc
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/5205d4d9e98c1b6b544b7decdd61777232b4573b1742fee90c25123b47752161.doc office_macro_on_action -
resource static1/unpack001/5205d4d9e98c1b6b544b7decdd61777232b4573b1742fee90c25123b47752161.doc
Files
-
ec5ef79f5cbf5107088736eb37ef91d6.bin.zip
Password: infected
-
5205d4d9e98c1b6b544b7decdd61777232b4573b1742fee90c25123b47752161.doc.doc windows office2003
ThisDocument
NewMacros