IMG00120474[.]xls | Triage

Sharing

General

Target

IMG00120474.xls
Size

504KB
MD5

2da13a1f88dfb75e1f1a37fc4212adf4
SHA1

ae03c0d7a946d97b148af77436f7495e0d9096a4
SHA256

55c32a9bd16c2d9113c92d2b57f2204aee9f1685c0496cea083309bb70d86c6f
SHA512

0eaa617bebb16c433a6a7b02faf9c9f96094cc400087baf5b358a50becd2dbec4a3e4a238792102bd8475644bb9b9451b56b102d1636d22a4034f74dba9d9e32
SSDEEP

12288:Sf7+Zft5H0dos08l9ZLB/m9UCNB6xRNZw:STB08lzL9qNB6xRN

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

IMG00120474.xls
.xls windows office2003

Module1

ThisWorkbook

Sheet1