Behavioral task
behavioral1
Sample
b177eb78fd48c8be412ab5c2f04ec36ec3e7eb69b0308cfbf3b5447af6192e00.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b177eb78fd48c8be412ab5c2f04ec36ec3e7eb69b0308cfbf3b5447af6192e00.doc
Resource
win10v2004-20240226-en
General
-
Target
b177eb78fd48c8be412ab5c2f04ec36ec3e7eb69b0308cfbf3b5447af6192e00
-
Size
906KB
-
MD5
2be89d512b7ecc4713710c0f0a530340
-
SHA1
54e9cecadad8e6392f3453ad46dd83fe8ba22872
-
SHA256
b177eb78fd48c8be412ab5c2f04ec36ec3e7eb69b0308cfbf3b5447af6192e00
-
SHA512
62dfc1cadba38cc512412e64a0126a705553bff9c9be148bc602b2a8e3efbfd85e66634c21e4867680ce8e8b0896affc151ac2af7a33db87259f14391d0ac4d2
-
SSDEEP
12288:U2ts9sgLDO4SCISq1ItGkggWduw0ZOGBJFfp+1x:xC9OypGAFp+1x
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b177eb78fd48c8be412ab5c2f04ec36ec3e7eb69b0308cfbf3b5447af6192e00.doc windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
frmFeedback
JKToolKitGYSizeModule
MassVarModule
JKToolKitM210ModelModule
JKToolKitMillChargeAndSpeed
CMineralToAssay
frmAbout
JKToolKitMorrellPowerModule
SizeDistributionModule
JKToolKitPulpDensityModule
JKToolKitLagranModule
JKToolKitRequiredBMPowerModule
JKToolKitSuperBootStrapModule
JKToolKitRodMillBondWorkModule
JKToolKitRodMillPowerCalcModule
JKToolKitMineralToAssayModule
JKToolKitUnitConversionModule
JKToolKitModule
RandomValues
JKToolKitBootstrapGradeModule
JKToolKitGYErrorModule
Statistics
Usefull
JKToolKitMorrelPowerToolModule
JKToolKitGasDispersionModule
JKToolKitBMPowerDrawModule
JKToolKitResidenceTimeModule
JKToolKitConversionTableModule
JKToolKitFrothRecoveryModule
RecVarModule
JKToolKitRegressionLinesModule