Overview

overview

8

Static

static

8

xlwings.xlam

windows7-x64

1

xlwings.xlam

windows10-2004-x64

1

Resubmissions

29/11/2022, 14:10

221129-rgt2psac7w 8

29/11/2022, 13:36

221129-qwby1aga8z 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ap-file-xlwings.xlam-713160493.zip

  • Size

    229KB

  • MD5

    052b4fbe485a30b55c71ca1931aa715f

  • SHA1

    0fc066b3a0ef92dedbdc8f3eba16a248b94cf8b8

  • SHA256

    4b56f83e6238d37885f41d24c774731ba470a724ccb512ac7db2be39cdbc9ccb

  • SHA512

    bc57455a214993153323061b3437c73ea01eb13a041d976c0024cf7ae820dfe9d6e795b599a6cd3f3443b720f788785f71e486e403867edc2b5b95009e2a7571

  • SSDEEP

    6144:8n0mQXuWHdD27TTAmx6AolMYdFH3pHKjQ1:CNUmAA6H3EjO

Score
8/10
macro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • ap-file-xlwings.xlam-713160493.zip
    .zip

    Password: cautionhandlewithcare

  • xlwings.xlam
    .xlam office2007

    ThisWorkbook

    Sheet1

    WebHelpers

    License

    Dictionary

    IWebAuthenticator

    Utils

    RibbonXlwings

    Config

    WebClient

    WebRequest

    Main

    Remote

    Extensions

    WebResponse