Behavioral task
behavioral1
Sample
d0fcef29eba72bd4f38c9fef2bfc2719502182043861459ede6a7d84de69e15f.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d0fcef29eba72bd4f38c9fef2bfc2719502182043861459ede6a7d84de69e15f.xls
Resource
win10v2004-20241007-en
General
-
Target
d0fcef29eba72bd4f38c9fef2bfc2719502182043861459ede6a7d84de69e15f
-
Size
88KB
-
MD5
5070a2a3d76978b04a1b8ca05448d88b
-
SHA1
b3ef7867582157ed4276866bc262412ca0819c9e
-
SHA256
d0fcef29eba72bd4f38c9fef2bfc2719502182043861459ede6a7d84de69e15f
-
SHA512
7bbc296ed13b8ce756625dc5a8528b83c6254135ba0f53a59694788698378fa4bd2b3daad1ba2443bfa31ff4aac0cc4f7aab2da38cb8baabbc77fd1bd4e137de
-
SSDEEP
1536:Bsyehv7q2Pjx45uoDGTj+5xtekEvi8/dgL8EsAeE9jbDXQA5kWvgrPE4nWHPNc2+:Cyehv7q2Pjx45uoDGTj+5xtekEvi8/dd
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
d0fcef29eba72bd4f38c9fef2bfc2719502182043861459ede6a7d84de69e15f.xls windows office2003
AdsGSryh6ifgbv
gjTiSdFHse4sdc
DFGrtHsr6uidfss
sd57e45yderfg