Static task
static1
Behavioral task
behavioral1
Sample
Copy_#_824.xls
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Copy_#_824.xls
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
Copy_#_824.xls
-
Size
707KB
-
MD5
36e8e3ce267eed9890d07b45b339a71b
-
SHA1
47e662c6d5041836ba207ad2e6ed22a99ca1a4da
-
SHA256
7bebb1f39af44412c5a7d8263d4fdae5ec1f234ad2f96e6f07add6daa3ce9b0a
-
SHA512
af22f3d08e86f3b97f0169f3ceeed46dd0cfb027d761c9b9b6589e2b8b2990a63d1ac3a40d1dcb0b0d4b2f7a2df16e898e66d158b00e567d37699f572fc6d9f3
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
Copy_#_824.xls.xls windows office2003
ThisWorkbook
Sheet1
YoiV5LewbEU0IMu
Jn0po_cKk_9jy
GZm54QzpyrEANt
Q1GkOy3Kjo
crpIcfbx2NbW