ef2ce641a4e9f270eea626e8e4800b0b97b4a436c40e7af30aeb6f02566b809c[.]zip

General

Target

ef2ce641a4e9f270eea626e8e4800b0b97b4a436c40e7af30aeb6f02566b809c.zip
Size

168KB
MD5

49a6a4c096afb84bac0b0098c7b73bc9
SHA1

997388edef1f672fd13ae00319832618ddcb7242
SHA256

251d741b40e78b852256362c5d0b8f0f5bfbd70215f019ef64eb40fb47dd798a
SHA512

50692531592766125d5a1e17fac04be4f08c55170d391c81c31798901f47507f84ebbbe2ea8bef5cbf16f5f98528a6bcb619357d3456776808767733a79d8a63
SSDEEP

3072:Js0+DZAmyTDIwAuzcoc9twGOup+RwpJEJgVtT95HKInY2CGVf1dhyKBM:GfjyLcRt4upcEtTbHK5P+dPC

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
static1/unpack001/ef2ce641a4e9f270eea626e8e4800b0b97b4a436c40e7af30aeb6f02566b809c.xls	office_xlm_macros

ef2ce641a4e9f270eea626e8e4800b0b97b4a436c40e7af30aeb6f02566b809c.zip
.zip

Password: infected
ef2ce641a4e9f270eea626e8e4800b0b97b4a436c40e7af30aeb6f02566b809c.xls
.xls windows office2003