Behavioral task
behavioral1
Sample
0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f.xls
Resource
win10v2004-20240226-en
General
-
Target
0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f
-
Size
1.4MB
-
MD5
952b502bc86f6df62e5a451743efc93e
-
SHA1
fd81476a5966031a058d67dd0176a2e1f9becb70
-
SHA256
0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f
-
SHA512
5c13140e0e4d53511e5d1999c6002f6d5aadfbe3d0d403543f3e06e156ae813d3bf724048d38a9edb7f6f1309bd44fb2541c3a86c98a99a032446d61cc3dd896
-
SSDEEP
24576:4inMbwTR/AUqao+HF8t66WYmntqRfGE62pY+Vh1aYjazNhH1hYx5PILmRbC1+Y+:nkwTRZFM2qR5
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f.xls windows office2003
ThisWorkbook
PopulateProfilesDropDownModule
QUERIESErrorsTrap
frmDateChangeThree
ConvertCurrencytoWords
SUMSubTotalingNotCrossTab
QUERIESSetSQLStringModule
FINDAmortizationScedule
QUERIESObtainTablesandColumns
UNIVERSALMacros
InsertRowWithinNamedRange
FunctionsCalledFromWithin
QUERIESFormatSQLResults
MISCFindZeroCombinations
frmHelpSystem
ALTERComplexDataFillIn
AAAPublicVariables
SUMSubTotalInPlace
QUERIESOpenPivotTableQuery
SUMCalculateAlwaysOn
ALTERSortBasedOnColor
QUERIESRemoteExecution
Sound
ALTERSortNineModule
QUERIESSQLViaADOObject
QUERIESSQLViaQueryTableObject
frmExecuteSQLStatement
CLEANMinorMacros
SUMSubTotalingCrossTab
SwapMouse
frmAmortization
FunctionsNotUsed
frmColorSort
frmMaintainConnectionProfiles
FormStarters
Sheet01
FINDFileListingCode
frmDateChangeFour
ALTERDateConverter
QUERIESSetConnectionModule
HELPAuthorized
PasswordBreaker
FINDAccessConnectionStrings
OpenProtectedWorkBook
QUERIESExampleProfiles
frmDateChangeTwo
VideoHelp
frmFlipSigns
frmConvertASCIICharacters
FINDBuildSearchList
SUMMinorMacros
FUNTIONSFunctionWriter
frmDateChangeOne
frmPivotTablesGetData
frmSortNine
frmHelpAbout
TheDataWandBuilder
CallingTheHelpFile
FINDAutomatedComparrison
FINDMarkExactInOutInBue
frmNoPermission
frmComplexFillInMessage
modRecycleVBA
SUMCount
ClassConnectionProfile
frmObtainAuthCodeInuptBox
LISTSMinorMacros
FINDMinorMacros
MISCMinorMacros
HELPMinorMacros
QUERIESMinorMacros
ALTERMinorMacros
QUERIESBuildTabsAndExecute
ClassSetCopyRowAndColumn
HELPCreateModules
Version14AndAbove
ALTERTranspose
frmHelpApplyRoundingFunction