W029621[.]xls | Triage

General

Target

W029621.xls
Size

342KB
MD5

dcb68156748e6c71ef5df8d9dddb3ff6
SHA1

ffee33ce2a6b4523a5f7323ca00a7347b1dc986a
SHA256

7da573f1004e4bb9c6979a6ccca45da8998deaa92dd1e318d128ff4888212536
SHA512

eb24bd095799613417aaf3b0d8344af0cfce01d9700379e5e3ed7b8eff3f0d5abd3606866704a871aa0e2469b84ca24ce2416a590711329695ed0e700276186e

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros