Behavioral task
behavioral1
Sample
647cfc3f2a34ef009b6234554edf681a.xls
Resource
win7-20221111-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
647cfc3f2a34ef009b6234554edf681a.xls
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
647cfc3f2a34ef009b6234554edf681a
-
Size
117KB
-
MD5
647cfc3f2a34ef009b6234554edf681a
-
SHA1
0491850040eec8cbf0f7e4e481454fea7f20a2b9
-
SHA256
dc1818ae893a988ea3d0f93018076e9f77b4be26ce76ec91e80969fabf9fe86b
-
SHA512
15acf1b9472669a812d3ab81e5052f1bc85248245e4c513fb2168a6b492140e8b03771e3356bf9bdd2c7d040ce8ffc94fdcf8d05e40f3e62a781acd3b975f54f
-
SSDEEP
1536:7BriXjci74RBcEBruUsS8uFTsrFl+ywSJSza86:7BmXjcZTruTLuFTsrCywrzh6
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
647cfc3f2a34ef009b6234554edf681a.xls windows office2003
Kangatang
ThisWorkbook