Static task
static1
Behavioral task
behavioral1
Sample
emo99.xls
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
emo99.xls
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
emo99.xls
-
Size
142KB
-
MD5
151a3a0128124613ed535a0c94fef154
-
SHA1
202916a33701b5db729211b462a6abb94f98c1fa
-
SHA256
8ddd5a2055cae9fa9e49ac6f4827d99d40d0ca74e880f521bc33079fb0d9405c
-
SHA512
0732461d273e576a817cd220f1e0e1830e9bf02434142a66fb7093ca9bf29f35123db59e571aad7e3d49bec67d021300955849c6224b57e958dc97f6dcf34335
-
SSDEEP
3072:ScKoSsxzNDZLDZjlbR868O8KlVH3UehvMqAPjxO5xyZUE5V5xtezEVg8/dgF4Lc:ScKoSsxzNDZLDZjlbR868O8KlVH3Ueh
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource yara_rule sample office_macros
Files
-
emo99.xls.xls windows office2003
vbasETGs4sk
kjRtghsw3hlsd
hdrRyhsdrhl