IMG_50_78_63[.]xls

General

Target

IMG_50_78_63.xls
Size

167KB
MD5

4c9d3db50cd58ec12305d904d2354f00
SHA1

b0a4028da497f94c3d00f0c44a60b40fc369d5bc
SHA256

fa0e9c96ef83963d0ab05d58302b13ac57356aed411562c71ef1812066e8ac97
SHA512

744fa49552e1cca5a0dc71da06d55f61a4f3380b61974e9306cfc79e91909169261b96e6ee3cc844df2e5e3354771e0468259f3522e21950e35397f0f9fb1a1e

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros