Behavioral task
behavioral1
Sample
PO 0767532.xls
Resource
win7-20220901-en
windows7-x64
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO 0767532.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
PO 0767532.xls
-
Size
107KB
-
MD5
4b7e91a5f07bfa63ebfbdc143210cc9e
-
SHA1
169d96a1b25a369dd0ae99ac6f03c817cb9ff929
-
SHA256
69230008ebd4db702b501b5d35d6c5551ae5d1cc779d0bbcf4526f606f332650
-
SHA512
fd154e908daf256b859f47c23a21d341238b960361d555bfaa9744d8a73cb251e8c6785363b94c5b6fd1ab84aaadd90aca20d5aeb8c679cae7356e25fa90ef0d
-
SSDEEP
3072:B9xEtjPOtioVjDGUU1qfDlaGGx+cL2QnAB9pWkmanzr0O8yFKdshErls4:XxEtjPOtioVjDGUU1qfDlavx+W2QnABU
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
PO 0767532.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
Sheet2
Sheet3