Behavioral task
behavioral1
Sample
74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx
Resource
win10v2004-20240802-en
General
-
Target
74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx
-
Size
291KB
-
MD5
7809e177584176e9def925007146cc5c
-
SHA1
c9827ff0398a018ff21ebd23e3e0297d95fe1696
-
SHA256
74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada
-
SHA512
8396eb7264bc8bbf76f594de2f2ca496ffcb86a830e6033a93a94e27096de7cebe2718fa7bfccd5092ed51f9f1ff0fae0785eaf14d8ce425650bed9a207e6d2e
-
SSDEEP
3072:v3DkKNI/SPjo6554RvFqBrtwB6e4tXbVfWOen/3cRKEBfCB4CX1vM6KGJSi9KWDV:ljLevFCXbVfWk1AvQaqbodcESCZ8ns
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx.doc .docx windows office2003
ThisDocument
cls_singlegroup
cls_upload
mdl_globals
mdl_upload
frm_save_dialog
ufrm_main
mdl_LogoCRM
frm_login
mdl_lang
clsMD5
clsCrypt
frm_debug
mdl_public_functions