Overview
overview
8Static
static
87f31ab924b...c4.xls
windows7-x64
17f31ab924b...c4.xls
windows10-2004-x64
1905e3f74e5...48.xls
windows7-x64
1905e3f74e5...48.xls
windows10-2004-x64
1b34893e236...9b.xls
windows7-x64
1b34893e236...9b.xls
windows10-2004-x64
1ba0a74f222...b4.xls
windows7-x64
1ba0a74f222...b4.xls
windows10-2004-x64
1d8823ee701...14.xls
windows7-x64
1d8823ee701...14.xls
windows10-2004-x64
1Resubmissions
29-06-2024 20:35
240629-zda4esygmn 8Behavioral task
behavioral1
Sample
7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4.xls
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
905e3f74e5dcca58cf6bb3afaec888a3d6cb7529b6e4974e417b2c8392929148.xls
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
905e3f74e5dcca58cf6bb3afaec888a3d6cb7529b6e4974e417b2c8392929148.xls
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
b34893e23666ab3d1d1476a78eb8e921be41273f5a3b653f1d425801278be39b.xls
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
b34893e23666ab3d1d1476a78eb8e921be41273f5a3b653f1d425801278be39b.xls
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
ba0a74f2227e32f4cee2e7358979547cf15fd19ea6c72144773f087621bdb4b4.xls
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
ba0a74f2227e32f4cee2e7358979547cf15fd19ea6c72144773f087621bdb4b4.xls
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
d8823ee70109ce789639748933a45c723060040597d17925cb605ad8f7f85a14.xls
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
d8823ee70109ce789639748933a45c723060040597d17925cb605ad8f7f85a14.xls
Resource
win10v2004-20240508-en
General
-
Target
Win32.Powerstats.zip
-
Size
1.2MB
-
MD5
ae855e7c228e5649e3935e91f221158f
-
SHA1
9eaf60a9bc10928b45e2aaac7ff41a492adbbcc9
-
SHA256
453a3c557daa18735a12c0cbcbad87a2fa53e21ad0927587b93f03e32f298145
-
SHA512
88e5cc6b3f08c332ae28b8a49302ee6bb9a3074da640f4f96de45c69805d045f341c6a25688bedebc1e0940e4d5937fa9feb680469a52295b4fbd4a031b198a5
-
SSDEEP
24576:AvvzyNvm8bVAo/ZJBGtEpRUcDRG9BmytATFS+xtLdtaeCU8j51zLvN4m0ODOV3Hu:QGvm8RLZJ8tEpakRG9ZEFhx4eNcBVXOk
Malware Config
Signatures
-
Office macro that triggers on suspicious action 2 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4 office_macro_on_action static1/unpack001/905e3f74e5dcca58cf6bb3afaec888a3d6cb7529b6e4974e417b2c8392929148 office_macro_on_action -
resource static1/unpack001/7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4
Files
-
Win32.Powerstats.zip.zip
Password: infected
-
7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4.xls windows office2003
Sheet1
ThisWorkbook
F
-
905e3f74e5dcca58cf6bb3afaec888a3d6cb7529b6e4974e417b2c8392929148.xls windows office2003
Sheet1
ThisWorkbook
F
-
b34893e23666ab3d1d1476a78eb8e921be41273f5a3b653f1d425801278be39b.xls windows office2003
Sheet1
Module1
ThisWorkbook
F
-
ba0a74f2227e32f4cee2e7358979547cf15fd19ea6c72144773f087621bdb4b4.xls windows office2003
-
d8823ee70109ce789639748933a45c723060040597d17925cb605ad8f7f85a14.xls windows office2003
Sheet1
ThisWorkbook
F