Overview
overview
4Static
static
3investigation_2.zip
windows7-x64
1investigation_2.zip
windows10-2004-x64
1investigation.zip
windows7-x64
1investigation.zip
windows10-2004-x64
1Readme.txt
windows7-x64
1Readme.txt
windows10-2004-x64
1WordTips T...1E.doc
windows7-x64
4WordTips T...1E.doc
windows10-2004-x64
1WordTips T...1E.pdf
windows7-x64
1WordTips T...1E.pdf
windows10-2004-x64
1Behavioral task
behavioral1
Sample
investigation_2.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
investigation_2.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
investigation.zip
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
investigation.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Readme.txt
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Readme.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
WordTips The Macros, 11E.doc
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
WordTips The Macros, 11E.doc
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
WordTips The Macros, 11E.pdf
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
WordTips The Macros, 11E.pdf
Resource
win10v2004-20240508-en
General
-
Target
investigation_2.zip
-
Size
11.1MB
-
MD5
8ccc5fe914177b71975dc17b2b69847f
-
SHA1
affa8888983f22c116af8aa2a879e7a9ee9524b7
-
SHA256
23719a9e63ca838f6217ca7d694d395825a9b030433428cfd158bd960f7ac7fe
-
SHA512
a6f276ce1b9accaf88afefb30d2052ab7fdf8e2c9fc6835a9801064a07d66f746a2230f96cf035334f8b6f771f39d00cfb9bc6a6ac67ebe3fb0afc0cf67d1052
-
SSDEEP
196608:xYkJ9EpyxbMrDSKR65j8UAdOVE/q9Qx7GF1b5rYEdktXWeLH4QPSm0U0wSWJn+pq:x/J9EUEDL8j+gEC9QdMYCktpLH4bUSeL
Malware Config
Signatures
Files
-
investigation_2.zip.zip
-
investigation.zip.zip
-
Readme.txt
-
WordTips The Macros, 11E.doc.doc windows office2003
-
WordTips The Macros, 11E.pdf.pdf
-
http://ActiveDocument.name
-
http://CoolDoc.dot
-
http://Envelope.dot
-
http://Macros8.dot
-
http://MyMacros.dot
-
http://MyTemplate.do
-
http://MyTemplate.dot
-
http://Normal.dot
-
http://OldNormal.dot
-
http://abcd.com
-
http://colorcop.net
-
http://efgh.com
-
http://ijkl.com
-
http://insight.trueinsight.za.com/word/word-utilities
-
http://instant-eyedropper.com
-
http://normal.dot
-
http://sharonparq.com
-
http://templateB.dot
-
http://windows.tips.net
-
http://wordfaqs.ssbarnhill.com/ExcludeWordFromDic.htm
-
http://www.SharonParq.com
-
http://www.Tips.net
-
http://www.archivepub.co.uk/book.html
-
http://www.dragondrop.com
-
http://www.edugeek.net/forums/scripts/35199-vba-script-change-word-docum
-
http://www.gmayor.com/document_batch_processes.htm
-
http://www.tips.net/privacy.html
-
http://www.vbaexpress.com/forum/showthread.php?31231
-
https://answers.microsoft.com/en-us/msoffice/forum/all/how-to-get-word-t
-
https://bergerplusschuler.com/2019/08/10/swapping-user-names/
-
https://bergerplusschuler.com/macros/
-
https://blogs.msmvps.com/wordmeister/2013/01/03/bug-word-2013-wdfindask/
-
https://classicvb.net/samples/CmdLine/
-
https://cybertext.wordpress.com/2009/10/18/word-separate-out-macros-and-
-
https://cybertext.wordpress.com/2011/10/14/word-macro-to-set-the-languag
-
https://docs.microsoft.com/en-us/office/vba/api/Word.WdRevisionType
-
https://docs.microsoft.com/en-us/office/vba/api/overview/word/object-mod
-
https://docs.microsoft.com/en-us/office/vba/api/word.font
-
https://gregmaxey.com/word_tip_pages/autocorrect_utility_manager.html
-
https://gregmaxey.com/word_tip_pages/customize_shortcut_menu.html
-
https://gregmaxey.com/word_tip_pages/modify_qat_button_image_text.html
-
https://gregmaxey.com/word_tip_pages/repeating_data.html
-
https://gregmaxey.com/word_tip_pages/word_fields.html
-
https://macrosmasterclass.com
-
https://msdn.microsoft.com/en-us/VBA/Word-VBA/articles/application-statu
-
https://msdn.microsoft.com/en-us/VBA/Word-VBA/articles/wdlanguageid-enumeration-word
-
https://msdn.microsoft.com/en-us/library/bb214033.aspx
-
https://msdn.microsoft.com/en-us/library/ee691834
-
https://shaunakelly.com/word/styles/formatoftextchanges.html
-
https://store.tips.net
-
https://store.tips.net/T010157
-
https://store.tips.net/T010352
-
https://support.microsoft.com/kb/330079
-
https://support.microsoft.com/kb/832897
-
https://support.microsoft.com/kb/921541
-
https://support.office.com/en-us/article/remove-hidden-data-and-personal
-
https://windows.tips.net/T012372
-
https://word.tips.net
-
https://word.tips.net/T000502
-
https://word.tips.net/T001037
-
https://word.tips.net/T001590
-
https://wordmvp.com/FAQs/AppErrors/MissingMenusEtc.htm
-
https://wordmvp.com/FAQs/AppErrors/ProblemsStartingWord.htm
-
https://wordmvp.com/FAQs/Customization/ExportAutocorrect.htm
-
https://wordmvp.com/FAQs/MacrosVBA/FindReplaceAllWithVBA.htm
-
https://wordmvp.com/FAQs/MacrosVBA/FindReplaceSymbols.htm
-
https://wordmvp.com/FAQs/MacrosVBA/InterceptSavePrint.htm
-
https://wordmvp.com/FAQs/MacrosVBA/UpdateStyles.htm
-
https://wordmvp.com/FAQs/Numbering/RemoveManualNumbers.htm
-
https://wordmvp.com/FAQs/TblsFldsFms/HLinksInForms.htm
-
https://wordmvp.com/FAQs/TblsFldsFms/InsEvnPgEndChap.htm
-
https://wordribbon.tips.net
-
https://wordribbon.tips.net/T001173
-
https://wordribbon.tips.net/T006076
-
https://wordribbon.tips.net/T008695
-
https://wordribbon.tips.net/T011693
-
https://wordribbon.tips.net/T012698
-
https://wordribbon.tips.net/T13648
-
https://wordribbon.tips.net/T13839
-
https://wordribbon.tips.net/T5998
-
https://wordribbon.tips.net/T6699
-
https://wordribbon.tips.net/T7120
-
https://wordribbon.tips.net/T8922
-
https://wordribbon.tips.net/T9444
-
https://wordribbon.tips.net/T9627
-
https://www.Tips.net
-
https://www.abacre.com/afr/
-
https://www.datanumen.com/blogs/2-quick-methods-extract-texts-text-boxes
-
https://www.editorium.com/14843.htm
-
https://www.editorium.com/EditTools/
-
https://www.editorium.com/counter.htm
-
https://www.editorsoftware.com/stylewriter.html
-
https://www.funduc.com/search_replace.htm
-
https://www.gmayor.com/SaveInTwoPlacesAddIn.htm
-
https://www.gmayor.com/SaveVersionsAdd-In.htm
-
https://www.google.com/search?q=
-
https://www.inforapid.com/html/searchreplace.htm
-
https://www.notetab.com
-
https://www.thedoctools.com/word-macros-tips/word-macros/extract-comment
-
https://www.tilti.com/software-for-translators/finecount/
-
https://www.tips.net
- Show all
-