Behavioral task
behavioral1
Sample
Ref671005018.xls
Resource
win7-20220901-en
windows7-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ref671005018.xls
Resource
win10v2004-20220812-en
windows10-2004-x64
21 signatures
150 seconds
General
-
Target
Ref671005018.xla
-
Size
232KB
-
MD5
169f284d5cb718718ef756d97e962d66
-
SHA1
f83c9e72f5d03e30e8d99b8ac3a7ea9e3ab98960
-
SHA256
f9068e24dc32b9314c21966284886537051e1ea8b7044772489a99c4906925af
-
SHA512
fd82a9a0044be3eb01b95dd5de63b0ac57072cf67fc2959ac1180f22f7ed5375ba9178e37b2fe3c2ddabe883aadb90e85d77c19406af1c5c41861d2d4bd34c26
-
SSDEEP
6144:yk3hOdsylKlgryzc4bNhZF+E+W2knA1ADM/NuNNFNNXNNuNNdNNPNNaNNbNNWNNb:GAcNuNNFNNXNNuNNdNNPNNaNNbNNWNNb
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
Ref671005018.xla.xls .xla windows office2003
Module1
ThisWorkbook
Sheet1