Behavioral task
behavioral1
Sample
7afdc39422f6993012f021e0be626fcfad986982d1f8271b66f739f7b94ef0d7.xls
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7afdc39422f6993012f021e0be626fcfad986982d1f8271b66f739f7b94ef0d7.xls
Resource
win10v2004-20240709-en
General
-
Target
7afdc39422f6993012f021e0be626fcfad986982d1f8271b66f739f7b94ef0d7
-
Size
411KB
-
MD5
f4998231ba61a80a2507839285d4df81
-
SHA1
cfe2a2193aa987482362101bb29c576154fb64a2
-
SHA256
7afdc39422f6993012f021e0be626fcfad986982d1f8271b66f739f7b94ef0d7
-
SHA512
5682276116e60cb3e556c969ce73d3aa38ad006c35d03b31ac327f7428a49be092fa2a8c017eb4534e2454bc111804ed1ab0ebbdb0e8b8ab2ccf24aa64aced46
-
SSDEEP
6144:DxEtjPOtioVjDGUU1qfDlavx+ddg67XDrRfKpik0rfIMdeFJD3cz8CnQlyHUpWrH:bPeF6H
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
7afdc39422f6993012f021e0be626fcfad986982d1f8271b66f739f7b94ef0d7.xls windows office2003
Kangatang
ThisWorkbook