Behavioral task
behavioral1
Sample
График_отпусков_Мосэнерго_2025.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
График_отпусков_Мосэнерго_2025.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
График_отпусков_Мосэнерго_2025.xls
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
График_отпусков_Мосэнерго_2025.xls
Resource
win10v2004-20241007-en
Errors
General
-
Target
499ff4a91d98b333bb280bf7d1112cdad8d30657c7dd8bae57f85c25b977bf1f
-
Size
42KB
-
MD5
9eae1c6938e22b28b0103e423c7181d2
-
SHA1
b75cc45d363ba4fdfa3e2a8e82920b32f1fff6cf
-
SHA256
499ff4a91d98b333bb280bf7d1112cdad8d30657c7dd8bae57f85c25b977bf1f
-
SHA512
51fe6560a0a5eafd422d9f5bff270755c5e9ebdf84ee6ec62dc61b25dcb7897727d355d9e92ff8a1cfca7151ad46a44bdd7333577ffbf800405ae60d3bb31b61
-
SSDEEP
768:egQUwCZL3lMVvTO1bVep5AGjUMAZsHQLwgU6anFSU8pyMGoZV+9Oh+LnybIemXd:e6wKpIgVep5AGAMLgU6anFOyM/ZV+byu
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/График_отпусков_Мосэнерго_2025.xls office_macro_on_action
Files
-
499ff4a91d98b333bb280bf7d1112cdad8d30657c7dd8bae57f85c25b977bf1f.zip
-
График_отпусков_Мосэнерго_2025.vbs.vbs
-
График_отпусков_Мосэнерго_2025.xls.xls windows office2003