Behavioral task
behavioral1
Sample
0b230b83c0b4af6e13ad837c35121d0827f5a243855a5d8a80e299b9c91ad5ae.unknown
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b230b83c0b4af6e13ad837c35121d0827f5a243855a5d8a80e299b9c91ad5ae.unknown
Resource
win10v2004-20240508-en
General
-
Target
2add40a089dad67f2edb6177cd294b88.bin
-
Size
369KB
-
MD5
9c2c4d352b84960b7407849e0da7f595
-
SHA1
1a6d212ccbcd0b94682ffa9cd1385f144ff84f9e
-
SHA256
927ce8caa2231efab46d8a46c267aa5053f54ac457bc2071116d2e736bea0ffb
-
SHA512
9f1f060ea925a7579fa313d161bf30ba225cebdb3667e601c796a1ed18ee875803c465ebfd352bb80c8a27e63b7fceba905a07a29eeff8d5f98db549e288fc19
-
SSDEEP
6144:uBkjQ708hcXpC47+NOoyDYgBIsdqyi3K4lj4zh7he53xtm5PmAcH3hjXkLNfzVbI:9M7BcF7+NdyYgBDdyKIj4Nhe53Hm576P
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/0b230b83c0b4af6e13ad837c35121d0827f5a243855a5d8a80e299b9c91ad5ae.unknown office_macro_on_action
Files
-
2add40a089dad67f2edb6177cd294b88.bin.zip
Password: infected
-
0b230b83c0b4af6e13ad837c35121d0827f5a243855a5d8a80e299b9c91ad5ae.unknown.unknown .doc windows office2003