Behavioral task
behavioral1
Sample
pls_open.xls
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
pls_open.xls
Resource
win10v2004-20220901-en
4 signatures
150 seconds
General
-
Target
pls_open.xls
-
Size
31KB
-
MD5
6b0e84a2a961e3ea64907c597e96c624
-
SHA1
b3bee4a776d1bbd4ff2cca205998996817aab3e7
-
SHA256
8e12fa7a7e0a5a657ddbe5940b283fee2b55a2e23b3ba71a3df401e4de1b467e
-
SHA512
f29a5603ea60ee0adf005df98d9374c715c4faae2c60ebd1f418e648147b8b258eab5776e31003cc20d3707cf3cfe4a53428ee7bd6c8d11d4826df67a29d6a0a
-
SSDEEP
768:RHyrlk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJOIgqOQXcmsino:p6lk3hbdlylKsgqopeJBWhZFGkE+cL2e
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
pls_open.xls.xls windows office2003