Behavioral task
behavioral1
Sample
a36e4a195fcd579fb124ef757027ec8e3f90392a21a9a73446dbd26ca0c72bb0.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a36e4a195fcd579fb124ef757027ec8e3f90392a21a9a73446dbd26ca0c72bb0.xls
Resource
win10v2004-20240704-en
General
-
Target
a36e4a195fcd579fb124ef757027ec8e3f90392a21a9a73446dbd26ca0c72bb0
-
Size
34KB
-
MD5
b737ac62ee6e5216c4b904342334c33d
-
SHA1
3736d6649314736d6c674958db7907df9d652653
-
SHA256
a36e4a195fcd579fb124ef757027ec8e3f90392a21a9a73446dbd26ca0c72bb0
-
SHA512
dc9d8e6745b3dec01256db243c77d716335e3c1fca3d5370e07ce323f5868bda2a1b927d049d00bf6ac1140fc45bb474c4588dea45dbf036f1f1814fd55ae53c
-
SSDEEP
768:xveWFwP+SKabAk0BuqCXlg+/fs5cClfZw2gmVXqA4LQYgO1mQQpSFeVAmcil:xSP+SKabAk0BuqCXlg+/fs5cClfZw2gQ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
a36e4a195fcd579fb124ef757027ec8e3f90392a21a9a73446dbd26ca0c72bb0.xls .vbs windows office2003 polyglot