Static task
static1
Behavioral task
behavioral1
Sample
Notification_30123.xls
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Notification_30123.xls
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
Notification_30123.xls
-
Size
712KB
-
MD5
b85ecc80652b17815971cc13eb057e54
-
SHA1
dd8a1d3ecc7a27d39aaf60c438ef8374a3afe887
-
SHA256
f3c837323c135a7d7ed9d03f856c81463abb80174211117f4bda193a55f1b78e
-
SHA512
f87ccacc2f3792c33466ee49fc3a918f4589251abd5eb511778f0da8fc3bdfc373579c01d816cb19ff5b1aa0272d7291f2c1eb6498d065b2f8573231bf1c7003
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
Notification_30123.xls.xls windows office2003
ThisWorkbook
Sheet1
MoEy9jFhh
B5VT_LqpM_dyzp_hwh
OPx0S0r
aB3OR_OW3_liIw_Rwjt
wzRw_ZcO
Q1C27CPN
q8vBOyNN
j6YNFGsjXXqaq
VUsReV16r16A
dRqJzib