Static task
static1
Behavioral task
behavioral1
Sample
Report_18392.xls
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Report_18392.xls
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
Report_18392.xls
-
Size
762KB
-
MD5
0e453e483119e62e58471b9ee48a358b
-
SHA1
8fb9f595b9474368f7acaf81d15437c0bbf5a578
-
SHA256
122533a946908e660880b2030174008bbb0791e5c5ac92651b24ae0589e8fa3d
-
SHA512
211c79149b10ba7fe4dd185c0decc0512cd74fc34ede6521a4599769909049fe6aae8630910c721c68c1e2724f3e63aff0e59f43655e3f0cb4037d0e183e2292
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
Report_18392.xls.xls windows office2003
ThisWorkbook
Sheet1
ZWLF5_wWne_aPX_vNEy
EIU6_3Mr
L7sKIgNHMlrvPbV
KDKW_2Kz_eTF_CCC
LXgUUG5pFoURV
Gv0D_0s97_hApC_z47t