Behavioral task
behavioral1
Sample
96bf0039c8086e96b175fc8c5d09bd6ebb70c40a7f3a00293eebe287da4ecc8c.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
96bf0039c8086e96b175fc8c5d09bd6ebb70c40a7f3a00293eebe287da4ecc8c.xls
Resource
win10v2004-20250314-en
General
-
Target
0e3d989062638b90b15bd109ea8d4001b691c6f3f2399f230ec3270891359e3a.zip
-
Size
352KB
-
MD5
6d5556536a5860eaf4320273d4aa8aac
-
SHA1
f60e8cdd6fd3628a988fa6ccee57f8761bce28b7
-
SHA256
0e3d989062638b90b15bd109ea8d4001b691c6f3f2399f230ec3270891359e3a
-
SHA512
9609488513d13fed41fbbf18458087f689765d29dae2d4ae7afc38244c549d921e5d761310aecdbf994d36ff71aaeb913d85c1c23aa0f0ce0c3d52d1ecf05b21
-
SSDEEP
6144:9oVXqk8AE1/9xfADFY6tnmVb1Y+E/GJPqWNgJ6U4tpsIztWvkNlfAxS:+syg/bADFYqmQ+E/GxqWNyF4tpTz8MP/
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/96bf0039c8086e96b175fc8c5d09bd6ebb70c40a7f3a00293eebe287da4ecc8c.xls office_macro_on_action -
resource static1/unpack001/96bf0039c8086e96b175fc8c5d09bd6ebb70c40a7f3a00293eebe287da4ecc8c.xls
Files
-
0e3d989062638b90b15bd109ea8d4001b691c6f3f2399f230ec3270891359e3a.zip.zip
Password: infected
-
96bf0039c8086e96b175fc8c5d09bd6ebb70c40a7f3a00293eebe287da4ecc8c.xls.xls windows office2003
ThisWorkbook
Sheet1
LYNNa