Static task
static1
Behavioral task
behavioral1
Sample
ACH%20payment%20copy.xls
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ACH%20payment%20copy.xls
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
Errors
Reason
office: invalid password
General
-
Target
ACH%20payment%20copy.xls
-
Size
42KB
-
MD5
d7763394097db2c01a48e09cfb5b893b
-
SHA1
ccc4372703a73af073f7d83a27e00a8c238f3f05
-
SHA256
f2027e57addce1b3749967082d9a6ebbccbc335652c6c9246d2bf14aad42f00b
-
SHA512
60d04b8a3fad4897c5326e23f2ca4bf12dda354c63d138689e4e3062ed81eadd2ec0eaf1b200b3759a5f2062f89c9720b2829203c7ea234f2d633d788e236d94
-
SSDEEP
768:Ao4VSxRUG9NJozFSoDC6VQCSpM5wwDIudE/8FC+LukV05:AoFxRUG9NJwSo+8gMiwDIKE7+/6
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
ACH%20payment%20copy.xls.xls .js windows office2003