ZYC-010222 CEPZ-020222[.]xls

General

Target
ZYC-010222 CEPZ-020222.xls
Size 150KB
Sample220202-x3szesbcbl
SHA256 817f5336a81c5f8b410e5e70fe7bd3577833ecf2aabcf9b586fac2dc4e0412be
MD5 44761b11083ec66d6254fcc6ba6e5052
SHA1 af02f661dcc58d404879999b34640a37c9c0cf16
SHA512 bb14b8a3b546d2c75ef6b703b795d1f34d3ddba37f03bbab8f0f054f401b224a4e0b60377039244afc6af6326d7c90953f8224ce0656d76bc0282dc60336378d
SSDEEP 3072:1cKoSsxzNDZLDZjlbR868O8KlVH3dehvMqAPjxO5xyZUE5V5xtezEVg8/dgnGx0:1cKoSsxzNDZLDZjlbR868O8KlVH3deh
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource	yara_rule
sample	office_macros

SHA256 817f5336a81c5f8b410e5e70fe7bd3577833ecf2aabcf9b586fac2dc4e0412be
MD5 44761b11083ec66d6254fcc6ba6e5052
SHA1 af02f661dcc58d404879999b34640a37c9c0cf16
SHA512 bb14b8a3b546d2c75ef6b703b795d1f34d3ddba37f03bbab8f0f054f401b224a4e0b60377039244afc6af6326d7c90953f8224ce0656d76bc0282dc60336378d
SSDEEP 3072:1cKoSsxzNDZLDZjlbR868O8KlVH3dehvMqAPjxO5xyZUE5V5xtezEVg8/dgnGx0:1cKoSsxzNDZLDZjlbR868O8KlVH3deh
MD5 SHA1 SHA512 SSDEEP

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action
Suspicious Office macro

Office document equipped with macros.

macro