Behavioral task
behavioral1
Sample
Ref671005018.xls
Resource
win7-20220901-en
windows7-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ref671005018.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
21 signatures
150 seconds
General
-
Target
Ref671005018.xla
-
Size
233KB
-
MD5
4e2e5429ef978cde8873d5354606cf77
-
SHA1
39d1d9c8416380c967c7eda4de6ddc5cf2a5c8f4
-
SHA256
d86628ed9c58fadce80cac836d949eb6dac45d1671a76d77ed4d39fe5db93bd8
-
SHA512
ad4dd92ce0de2a61be9328c01d82500b1bfea67d320267560647d9fb70cd6b24444346b6296bfa8584a4a0a29875eecbf0f8185d8a4abd2c0d5933e4fafde9e6
-
SSDEEP
6144:yk3hOdsylKlgryzc4bNhZF+E+W2knA1ADM/NuNNFNNXNNuNNdNNPNNaNNbNNWNNb:GAcNuNNFNNXNNuNNdNNPNNaNNbNNWNNb
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
Ref671005018.xla.xls .xla windows office2003
Module1
ThisWorkbook
Sheet1