Behavioral task
behavioral1
Sample
RFQ - 6093.xls
Resource
win7-20220812-en
windows7-x64
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ - 6093.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
16 signatures
150 seconds
General
-
Target
RFQ - 6093.xls
-
Size
102KB
-
MD5
f6431c9663214dc8c24689b22e2dd767
-
SHA1
4a2f9d7926ad24bbaf2b7a98878714e9e5261574
-
SHA256
c965edc69fe9ef5e9c50dc9cfd4540551005397a55b0547b381640819cf101e9
-
SHA512
1fce426cbc52d12d1365ee3873747b4466f94ca00b296001c5db204d2854f4367b09ba584842652796e2908480b98aa17c4b3a9794ecf23255eafe55772f6589
-
SSDEEP
3072:7k3hOdsylKlgryzc4bNhZFGzE+cL2knAr9pWkmanzr0O8pFKdshErlsDB:7k3hOdsylKlgryzc4bNhZF+E+W2knAr
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
RFQ - 6093.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1