Behavioral task
behavioral1
Sample
PO.xls
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO.xls
Resource
win10v2004-20220812-en
6 signatures
150 seconds
General
-
Target
PO.xls
-
Size
105KB
-
MD5
a7af335a57f5ebce9880de291cc6fbf2
-
SHA1
5aec9aaca0aa44a7986f58e4c3b0b2f8ebe7a1a5
-
SHA256
b0bc54c847d176de306e4c7b5b33422525788fa8dfeae43a1a45b1c58c063f8f
-
SHA512
5f5a75f2ddf6e6dfde8d5f0873d15e5ffdb868e78c05b7d377495d3393fa18638b5ddc4b10f2696e9cbbf9f042c29aae07b3fdcdccf8604b86b0d76e82f199e0
-
SSDEEP
3072:oMxEtjPOtioVjDGUU1qfDlaGGx+cL2QnAb9pWkmanzr0O8eKdshErls:jxEtjPOtioVjDGUU1qfDlavx+W2QnAb7
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
PO.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
Sheet2
Sheet3