Behavioral task
behavioral1
Sample
PO 0767532.xls
Resource
win7-20220812-en
windows7-x64
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO 0767532.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
16 signatures
150 seconds
General
-
Target
PO 0767532.xls
-
Size
107KB
-
MD5
4d3137651038dfe44ccf6440f6281dfb
-
SHA1
2d28e875fca6e4f945b5165b03f9aa7747764836
-
SHA256
13c9bc1d2ac60ca5abb5a235d7d27d8c6f06e497da360f391785044d413cc29e
-
SHA512
7cfda63f4a2a8a4fd4457135c345f403bb3665e4815c4bb983fa14d05ce94d1cd35daa54926fea9f64a6b998b428ab3cf0f2f05a371941cc145a5fb74e54d0ad
-
SSDEEP
3072:z9xEtjPOtioVjDGUU1qfDlaGGx+cL2QnAB9pWkmanzr0O8yFKdshErls4:JxEtjPOtioVjDGUU1qfDlavx+W2QnABU
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
PO 0767532.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
Sheet2
Sheet3