Behavioral task
behavioral1
Sample
a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6.doc
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6.doc
Resource
win10v2004-20240226-en
General
-
Target
a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6
-
Size
269KB
-
MD5
9c9199d3077c66459fcbf040e687e2b5
-
SHA1
ff93e5285fdeddc75bb8c79dc4494f06d788cece
-
SHA256
a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6
-
SHA512
406e61fbc82cb3a16f6d7649e660a7100c9f01e11bdf3853de49d6a63302667388a2d9de950ccb142a42c599471e1dd2eff39f34953af9a0eff80795731c4241
-
SSDEEP
6144:upaFUzYwyGpKfaGvGdGLGDyRa8spqTC4D:upaa1ymVCW8uyRtHCk
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6.doc windows office2003
Sheet20
ThisWorkbook
Sheet17
AboutGWSDAT
GWSDATAdmin
LicenseForm
DisclaimerAcceptForm
DatatoCSV
DisclaimerForm1
ConfigParams
GWSDAT
GWSDATOptions
Sheet1
Sheet19
RLibsAdmin