Behavioral task
behavioral1
Sample
d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb.doc
Resource
win10v2004-20240226-en
General
-
Target
d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb
-
Size
313KB
-
MD5
c34ac57f67e99eec6d0c036e0480f12c
-
SHA1
821acfea13041dba8c63a603b4e2ee113e66d08f
-
SHA256
d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb
-
SHA512
14f601500cdf7949b223528149fbe7b4312abca750cdd3272efeb71fbd4ac4327b2d40685c5005937cf9e6fd103886e1ba03020377cc6768b1396ea335de5642
-
SSDEEP
6144:qpZU1IeauirhOhnt+P5rJIqxDb/ULIkbLSXlviHyEKkUL:qA1Ieau9+P51zULIkbLSXlviHyEKkUL
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb.doc windows office2003
ThisWorkbook
Sheet1
Toolbars
Macros
frmManager
CADEngine
frmCreate
frmDefaults
Support
ReadRange