Overview

overview

8

Static

static

8

xlwings.xlam

windows7-x64

1

xlwings.xlam

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ap-file-xlwings.xlam-1040827717.zip

  • Size

    230KB

  • MD5

    0e51bb23176e262a43f505defdeb70f3

  • SHA1

    0d62566bfdc57f7d7a047a16343d9408c5dd05cf

  • SHA256

    bf6f51b928e56cc04772a87e788cbe5526924889d2b57859df1b79db6ec067f2

  • SHA512

    2b3b85039337d2933fa08eb9b9af62b74cea36cfb7fb4810a1b6e24b2b258a35793bd7badee2d59a5014cbe37f6fcc052ad06e6d3ead30747911c5544d7e2474

  • SSDEEP

    6144:kzKxYhhwUanDjSRnzRN0ikzhoknC6prAkw0Ml9:kzkYHbaDuz2zuP6E0Ml9

Score
8/10
macro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • ap-file-xlwings.xlam-1040827717.zip
    .zip

    Password: cautionhandlewithcare

  • xlwings.xlam
    .xlam office2007

    ThisWorkbook

    Sheet1

    WebHelpers

    License

    Dictionary

    IWebAuthenticator

    Utils

    RibbonXlwings

    Config

    WebClient

    WebRequest

    Main

    Remote

    Extensions

    WebResponse

  • xlwings.xlam.METADATA