Behavioral task
behavioral1
Sample
074cf3b2dde5ea707228d9af4f4e81a5.xls
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
074cf3b2dde5ea707228d9af4f4e81a5.xls
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
074cf3b2dde5ea707228d9af4f4e81a5
-
Size
38KB
-
MD5
074cf3b2dde5ea707228d9af4f4e81a5
-
SHA1
32e71efecc45a9c967adb4ae626227fd03f01fda
-
SHA256
cb1243fd54579cc3b749d23bb031115b3b0a0a6125458e4025c2948693a72896
-
SHA512
a1333bd7a479e06ebeed81643fe44531020ce3cbea2ba9a70b0a16c04c428cf8380e2d52d9575eae21bc12bb6de487093257107520c48ea9399891d3104ea35c
-
SSDEEP
768:uQQqrwvdD/Dc2rxEtjPOtioVjDGUU1qfDlaGGx+cLgLI0dApWQDOqyAAsn+Iza86:uQQqbAxEtjPOtioVjDGUU1qfDlaGGx+v
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
074cf3b2dde5ea707228d9af4f4e81a5.xls windows office2003
Kangatang
ThisWorkbook