Behavioral task
behavioral1
Sample
e972a2cb60a0f03221205e5fc502795fdf38c93e5d230a59c9c3961abfaec75a.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e972a2cb60a0f03221205e5fc502795fdf38c93e5d230a59c9c3961abfaec75a.xls
Resource
win10v2004-20240226-en
General
-
Target
e972a2cb60a0f03221205e5fc502795fdf38c93e5d230a59c9c3961abfaec75a
-
Size
7.0MB
-
MD5
6800d092941e6cb6eea829139d1b59e2
-
SHA1
a46da843ebaaec38dd7bdc3c62cd63a7f1ba0fbb
-
SHA256
e972a2cb60a0f03221205e5fc502795fdf38c93e5d230a59c9c3961abfaec75a
-
SHA512
2954cd1a0cd81c50d46a2c5da32d8079255cae03e817df3c3672fea9494de5d0e64211a28e1c50307d233261ce3c22c1f5c9e2aa9771221ef084bb61db6d88f4
-
SSDEEP
24576:yaLo4F77VdpC2EBeOuc5544ZxGrB5YZhIxZ85RIBZ+D5hmbR5OjZxGrB5eDZhGbT:ymVCp7DDzmxGnSUwO3DOpuMcMme
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
e972a2cb60a0f03221205e5fc502795fdf38c93e5d230a59c9c3961abfaec75a.xls windows office2003
Лист1
Лист2
Лист3
Лист4
Лист5
ThisWorkbook
ExcelMenu
CommonModule
Graphik
Mainpls
clsILoadSave
RegOperation
mXML
Лист13
mUniversalUpdate
IndexID
Лист6
DisService
Лист14
modVerify
clsLocalSettings
ЗаполнениеЛистов
Лист7
Лист8
Лист9
Лист10
Лист11
Лист12
myFunctions
Лист15
basFileInfo
Кнопки
modRibbonA
modGrBut