Behavioral task
behavioral1
Sample
5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7.xls
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7.xls
Resource
win10v2004-20240508-en
General
-
Target
5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7
-
Size
42KB
-
MD5
af8d22bdb598e028aa8ff51956740969
-
SHA1
ab503500db84de5f1c8a9676beeab6ee6faf2efe
-
SHA256
5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7
-
SHA512
f28a7bed0ab844efd42bfa3c27c17a09fd5629b8f3774172a295dffa21414d1e824c08be3a4058316a8eb4644e005116612bb89c5551292ed5c4d704f1dc5744
-
SSDEEP
768:ibUek3hOdsylKlgryzc4bNhZFGzE+cL4LgldWgxMzjuDBg8l0VACT:8k3hOdsylKlgryzc4bNhZFGzE+cL4Lg+
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7.xls windows office2003
Kangatang
ThisWorkbook