Behavioral task
behavioral1
Sample
ARRIVAL NOTICE.xls
Resource
win7-20220812-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
ARRIVAL NOTICE.xls
Resource
win10v2004-20220901-en
18 signatures
150 seconds
General
-
Target
ARRIVAL NOTICE.xla
-
Size
175KB
-
MD5
7739c713ab24ab08e379a740a1b59214
-
SHA1
274dcef82734a6f93b5f098db068bd676c4c2220
-
SHA256
40c8a5e80fecc8b1d3aa93ec9fdcd95e92e52bdbff1dcec111db70aa670b27fb
-
SHA512
b96ad23fbb29ee2ab7a344826c9e1d323cc746ea38c1aa4a728fb8a0a6c8531434dea68ca0759caf94a9a02d64db5aae3aa3e2eeeeb797fb52d4b84f9675a40f
-
SSDEEP
3072:Xk3hOdsylKlgryzc4bNhZFGzE+cL2knA3DsNiXpyj0PPpBjp:Xk3hOdsylKlgryzc4bNhZF+E+W2knATF
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
ARRIVAL NOTICE.xla.xls .xla windows office2003
Module1
ThisWorkbook
Sheet1