Behavioral task
behavioral1
Sample
f036e1ccae9f4a1f50f3d75cead709e3a817f99c39adabc7573a2143f64e7858.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
f036e1ccae9f4a1f50f3d75cead709e3a817f99c39adabc7573a2143f64e7858.xls
Resource
win10v2004-20240226-en
General
-
Target
f036e1ccae9f4a1f50f3d75cead709e3a817f99c39adabc7573a2143f64e7858
-
Size
715KB
-
MD5
e3cf707b9c567f6d5ff98d7eaa16ff6d
-
SHA1
ec7c59cc1157cbffc1c5b19475f5f93d2982e2d0
-
SHA256
f036e1ccae9f4a1f50f3d75cead709e3a817f99c39adabc7573a2143f64e7858
-
SHA512
06c0e9ea87cb09b0e10392d6beeed74c9d58d23a192268f1efee4868526cdf4ce376ed6a67da210a7dd7e1bd442f6a41679d691b957d13f8d5dde9c1442a189f
-
SSDEEP
12288:iRsUpcHnXXzNkRKFfsAqdlVDczXZejbeAQjSY4VTZoLtq57kWjuNMfK:iRsSc3DGUFfpqdUzXM/GjS/VTZoIP
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
f036e1ccae9f4a1f50f3d75cead709e3a817f99c39adabc7573a2143f64e7858.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3