PO_723_057_35[.]xls

Resubmissions

15-04-2021 14:52

15-04-2021 14:46

Target

PO_723_057_35.xls
Size

342KB
MD5

f264b8c58febaa3f3eea9a8c83c78cbf
SHA1

36010881f4c3e15878bb3d5e76bc443d82827ebe
SHA256

db66b26d04c77e03bbf22957af34ba2b5817c397036ab8d4b7c222ec1b1ff40e
SHA512

a60be6e617f2704c3dfdc7bcc06e2426f5c52e56da447c92c94e1ce3d118c27b0ef180845557abf3c1d6a63de4f85b93c11eac06bb7bc51c17934406c797f912

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros