Static task
static1
Behavioral task
behavioral1
Sample
xmj.bin.xls
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
xmj.bin.xls
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
xmj.bin.zip
-
Size
131KB
-
MD5
16164d8b641ae8bf1f89ae70ca632c8c
-
SHA1
7d4a3ecc4b1eb9594e26dfb066f68229e0c6005b
-
SHA256
e9866e66273129ebe5ff7ff56e1a5fe511deeac1a33cb763f3c30ef89f27b733
-
SHA512
76f20ace435ff290f8cb9e72469445bed99c88db1b3d0e807e8d28e3a13e26a2cb55dba742fd41cc37d9cb7c6e9d37b71065ad02f5eadaebcc2d7c8c6f006e24
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule static1/unpack001/xmj.bin office_macro_on_action -
Processes:
resource yara_rule static1/unpack001/xmj.bin office_macros
Files
-
xmj.bin.zip.zip
Password: infected
-
xmj.bin.xls windows office2003
ThisWorkbook
Sheet1
Sheet2