Behavioral task
behavioral1
Sample
ed609af5b983f9f09ae4e148d2e118da993bdc378483c26f36aabcdd2b9938bd.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed609af5b983f9f09ae4e148d2e118da993bdc378483c26f36aabcdd2b9938bd.xls
Resource
win10v2004-20240611-en
General
-
Target
ed609af5b983f9f09ae4e148d2e118da993bdc378483c26f36aabcdd2b9938bd
-
Size
715KB
-
MD5
25222a9cd85a1d7f0916f4464b1e9980
-
SHA1
c9d7c303bdf62d738cc047b45d1cbcdda11369f5
-
SHA256
ed609af5b983f9f09ae4e148d2e118da993bdc378483c26f36aabcdd2b9938bd
-
SHA512
5cc9383762f6b934d6df972e7a7f8b8c5c2c0249307cfccc5fe382efb7e64306eef3f0c1eb34c0b82e9e27d2832ad2a3b3b25cf174d6433f88ddfaae9a7a04dd
-
SSDEEP
12288:jRsUpcHnXXzNkRKFfsAqdlVDczXZejbeAQjSY4VTZoLtq57kWjuNMfK:jRsSc3DGUFfpqdUzXM/GjS/VTZoIP
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
ed609af5b983f9f09ae4e148d2e118da993bdc378483c26f36aabcdd2b9938bd.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3