Behavioral task
behavioral1
Sample
Nord+VPN.msi
Resource
win7-20240729-en
31 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nord+VPN.msi
Resource
win10v2004-20240802-en
18 signatures
150 seconds
General
-
Target
Nord+VPN.msi
-
Size
203.4MB
-
MD5
0616cd29b4fb15b08b50dbfdf99c191a
-
SHA1
e251ea8847f37fbbd686f6379ee2220d1f491f62
-
SHA256
035dede666d0126840af116ba9e496d70f4af85ad284bcbe7ec07f4619519f92
-
SHA512
108436f0ed0cb99609c7e907d4d94d45008040cc0aef7eacaa25425d86409acd01fe60dda6414eede6a98bac574392711e49a2cb4728ed5a97bddde55dcaecab
-
SSDEEP
6291456:4CgJ2n36uZvxL6NT8bQ7w9qCgCGxrIrP:4CmM36uZ5UTf755hx8r
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
Nord+VPN.msi.msi