Behavioral task
behavioral1
Sample
e33209146f95e8c43d6ded642235f842d70b5c568d7ca006d52c4195423a8594.doc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e33209146f95e8c43d6ded642235f842d70b5c568d7ca006d52c4195423a8594.doc
Resource
win10v2004-20241007-en
General
-
Target
e33209146f95e8c43d6ded642235f842d70b5c568d7ca006d52c4195423a8594
-
Size
64KB
-
MD5
d9a8f9f7a45dba6f6883e89189c71c9e
-
SHA1
4da0ddb8fae437314db58089a38c50e5105e93b5
-
SHA256
e33209146f95e8c43d6ded642235f842d70b5c568d7ca006d52c4195423a8594
-
SHA512
83e21823dd9a1abffba2280ccfd6dcebdbb65ec27e80fe8d6d69c8dd9b7db1b73ac317bb29a30dc6542874aa84385b10148db9274903ed3ac7c0dfafe5b47663
-
SSDEEP
768:KooRooooM6AoroooonooQoooVoooooIooNpJcaUitGAlmrJpmxlzC+w99NB33y/o:SptJlmrJpmxlRw99NBny/qJP8GjmuZ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
e33209146f95e8c43d6ded642235f842d70b5c568d7ca006d52c4195423a8594.doc windows office2003
ZIhIpmj
jMohWYEOYPKN
jQJwTrFjI