Overview
overview
10Static
static
8eicar-stan...nt.pdf
windows7-x64
3eicar-stan...nt.pdf
windows10-2004-x64
3eicar-stan...rt.pdf
windows7-x64
3eicar-stan...rt.pdf
windows10-2004-x64
3eicar-stan...om.com
windows7-x64
eicar-stan...om.com
windows10-2004-x64
eicar-stan...ho.xls
windows7-x64
10eicar-stan...ho.xls
windows10-2004-x64
1eicar-stan...o.xlsx
windows7-x64
10eicar-stan...o.xlsx
windows10-2004-x64
1eicar-stan...ho.xls
windows7-x64
10eicar-stan...ho.xls
windows10-2004-x64
10eicar-stan...o.xlsm
windows7-x64
10eicar-stan...o.xlsm
windows10-2004-x64
10eicar-stan...ox.xls
windows7-x64
3eicar-stan...ox.xls
windows10-2004-x64
1eicar-stan...x.xlsm
windows7-x64
3eicar-stan...x.xlsm
windows10-2004-x64
1eicar-stan...ho.xls
windows7-x64
10eicar-stan...ho.xls
windows10-2004-x64
10eicar-stan...o.xlsm
windows7-x64
10eicar-stan...o.xlsm
windows10-2004-x64
10eicar-stan...le.xls
windows7-x64
3eicar-stan...le.xls
windows10-2004-x64
1eicar-stan...e.xlsm
windows7-x64
3eicar-stan...e.xlsm
windows10-2004-x64
1eicar-stan...ox.pps
windows7-x64
3eicar-stan...ox.pps
windows10-2004-x64
1eicar-stan...x.pptm
windows7-x64
3eicar-stan...x.pptm
windows10-2004-x64
1eicar-stan...ho.pps
windows7-x64
10eicar-stan...ho.pps
windows10-2004-x64
1Behavioral task
behavioral1
Sample
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-attachment.pdf
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-attachment.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-javascript-alert.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-javascript-alert.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
eicar-standard-antivirus-test-files/eicar-com.com
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
eicar-standard-antivirus-test-files/eicar-com.com
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xls
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xls
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xlsx
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xlsx
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xls
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xls
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xlsm
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xls
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xls
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xlsm
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xls
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xls
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xlsm
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xls
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xls
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xlsm
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.pps
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.pps
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.pptm
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.pptm
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-powershell-echo.pps
Resource
win7-20241023-en
Behavioral task
behavioral32
Sample
eicar-standard-antivirus-test-files/eicar-powerpoint-action-powershell-echo.pps
Resource
win10v2004-20241007-en
General
-
Target
eicar-standard-antivirus-test-files.zip
-
Size
500KB
-
MD5
2c0639649b894a0845bc0601fa67b3c7
-
SHA1
dcb53d4fb45650fe1e49aada7178972065c4e1dc
-
SHA256
648eb3dd8252073b53f16887084c5415f56e90877aee69d29393efe1382679b4
-
SHA512
f50e5fafac06bd5ee3273e14e61722d4f8ba282776d78b89682a409c1cc4cf7c77b28dfc17b8095241a771873c9629f6079395689d83368c4fc9745f0c5bb251
-
SSDEEP
12288:s+LA9qkSthlow8qMlUIQ3EaVALm3zyo7Dui3d/FzNh5UT4QBaisl0mT:d5lp8qMlzQH6S35bu4P
Malware Config
Signatures
-
Office macro that triggers on suspicious action 8 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xls office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xls office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xls office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xls office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-word-macro-cmd-echo.doc office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-word-macro-msgbox.doc office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-word-macro-powershell-echo.doc office_macro_on_action static1/unpack001/eicar-standard-antivirus-test-files/eicar-word-macro-write-file.doc office_macro_on_action -
resource static1/unpack001/eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xls -
PDF contains JavaScript
Detects presence of JavaScript in PDF files.
-
PDF contains one or more embedded files
Detects presence of embedded files in PDF files.
-
EICAR Anti-Malware test file 3 IoCs
resource yara_rule static1/unpack001/eicar-standard-antivirus-test-files/eicar-com.com eicar_test_file static1/unpack004/eicar.com eicar_test_file static1/unpack006/eicar.com eicar_test_file
Files
-
eicar-standard-antivirus-test-files.zip.zip
-
eicar-standard-antivirus-test-files/.git/HEAD
-
eicar-standard-antivirus-test-files/.git/config
-
eicar-standard-antivirus-test-files/.git/description
-
eicar-standard-antivirus-test-files/.git/hooks/applypatch-msg.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/commit-msg.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/fsmonitor-watchman.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/post-update.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-applypatch.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-commit.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-merge-commit.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-push.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-rebase.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/pre-receive.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/prepare-commit-msg.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/push-to-checkout.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/sendemail-validate.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/hooks/update.sample.sh linux
-
eicar-standard-antivirus-test-files/.git/index
-
eicar-standard-antivirus-test-files/.git/info/exclude
-
eicar-standard-antivirus-test-files/.git/logs/HEAD
-
eicar-standard-antivirus-test-files/.git/logs/refs/heads/master
-
eicar-standard-antivirus-test-files/.git/logs/refs/remotes/origin/HEAD
-
eicar-standard-antivirus-test-files/.git/objects/pack/pack-50f38735dc565e93b481055ead27282664466978.idx
-
eicar-standard-antivirus-test-files/.git/objects/pack/pack-50f38735dc565e93b481055ead27282664466978.pack
-
eicar-standard-antivirus-test-files/.git/objects/pack/pack-50f38735dc565e93b481055ead27282664466978.rev
-
eicar-standard-antivirus-test-files/.git/packed-refs
-
eicar-standard-antivirus-test-files/.git/refs/heads/master
-
eicar-standard-antivirus-test-files/.git/refs/remotes/origin/HEAD
-
eicar-standard-antivirus-test-files/.github/FUNDING.yml
-
eicar-standard-antivirus-test-files/README.md
-
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-attachment.pdf.pdf
-
document.txt
-
eicar-standard-antivirus-test-files/eicar-adobe-acrobat-javascript-alert.pdf.pdf
-
eicar-standard-antivirus-test-files/eicar-com.com
-
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xls.xls windows office2003
-
eicar-standard-antivirus-test-files/eicar-excel-dde-cmd-powershell-echo.xlsx.xlsx office2007
-
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xlsm.xlsm office2007
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xlsm.xlsm office2007
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-powershell-echo.xlsm.xlsm office2007
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-excel-macro-write-file.xlsm.xlsm office2007
Module1
ThisWorkbook
Sheet1
-
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.ppt.pps .ppt windows office2003
-
eicar-standard-antivirus-test-files/eicar-powerpoint-action-macro-msgbox.pptm.pptm office2007
-
eicar-standard-antivirus-test-files/eicar-powerpoint-action-powershell-echo.ppt.pps .ppt windows office2003
-
eicar-standard-antivirus-test-files/eicar-powerpoint-action-powershell-echo.pptx.pptx office2007
-
eicar-standard-antivirus-test-files/eicar-test.txt
-
eicar-standard-antivirus-test-files/eicar-word-macro-cmd-echo.doc.doc windows office2003
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-cmd-echo.docm.docm office2007
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-msgbox.doc.doc windows office2003
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-msgbox.docm.docm office2007
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-powershell-echo.doc.doc windows office2003
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-powershell-echo.docm.docm office2007
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-write-file.doc.doc windows office2003
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-word-macro-write-file.docm.docm office2007
ThisDocument
NewMacros
-
eicar-standard-antivirus-test-files/eicar-zip.zip.zip
-
eicar.com
-
eicar-standard-antivirus-test-files/eicar-zip2.zip.zip
-
eicar_com.zip.zip
-
eicar.com