Behavioral task
behavioral1
Sample
$R2MUZWW.xls
Resource
win7-20220901-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
$R2MUZWW.xls
Resource
win10v2004-20220901-en
4 signatures
150 seconds
General
-
Target
$R2MUZWW.xls.zip
-
Size
203KB
-
MD5
2f3656cd3b906e250b89d873dd0e43a2
-
SHA1
d2c944d8775193697ec49e0ef0814600130842c1
-
SHA256
02f6119b6aa751f37135d962974d2cd13a4061ed9951573d197f836aa74d027c
-
SHA512
479cd70c80f0fc506435043b14fa31f969e0baa359e6eeb6fd6bf0f798f28145aa8b92df95d4d2281539b1ee1126e08d81b74269c78c573bfc1faf43f5279078
-
SSDEEP
6144:KFT1x7MWtATCJvfa5GrLyRnFlZ00dT4WE:inwSyRFlL9bE
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/$R2MUZWW.xls office_macro_on_action -
resource static1/unpack001/$R2MUZWW.xls
Files
-
$R2MUZWW.xls.zip.zip
-
$R2MUZWW.xls.xls windows office2003
Sheet1
ThisWorkbook
Sheet2
Mac
General
Files
Errors
Developer
Dates
Custom
Arrays
Report
Record
Sorting
MultiLookupItem
Lookup_Table
MappingKey
ColumnMap
ClassPropertySet
ClassProperty
Frm_AppStatus
MapItem
GLOBALS
-
checksums.txt