Behavioral task
behavioral1
Sample
82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6.doc
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6.doc
Resource
win10v2004-20240802-en
General
-
Target
82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6
-
Size
1015KB
-
MD5
4e2bb8dc4cf7e0a500d42037edf7971b
-
SHA1
1e20196496f0bfefb2f56acae2f0ad2a968d0575
-
SHA256
82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6
-
SHA512
761a39aced841b90f65cc9bc8ab80a47fd19fcebc74efc75766ca77006d4d3436692e1e36fe8c90ee839dc2166cdb08081070450d2417610c5b5c5a905d2a445
-
SSDEEP
24576:j4iSLaCMlHhYGBJUxbRKnX9Yy1Dhxp0oQ9K9jhwXGAxOgUk/T:kiSLaCkHhYGBJUxlK+y1Dp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6.doc .vbs windows office2003 polyglot
ThisDocument
ClassREG
VDocDesFront
VDocDesLibrary
FrmInsVoc
FrmWordArt
FrmTableMan
FrmProtect
ClassEvent
FrmInsTab
frmTemplates
server
ModSession
FrmCon
ModLang
Class64
ClassHttp
FrmSave
Class64ToFile
FrmUnProtect