Behavioral task
behavioral1
Sample
TRUE_doc.xls
Resource
win7-20220901-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
TRUE_doc.xls
Resource
win10v2004-20220901-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
TRUE_doc.xls
-
Size
38KB
-
MD5
6b77a4c21a8ef90057c12cd41aa8fa51
-
SHA1
82d0a47baa5e7a44a28315739a4a517a56ca3942
-
SHA256
c19c1e39b5f614db3380b72dfb98fbe25ef4ed77bf3ac52055a1239a31a42519
-
SHA512
6c42cb9f7be0df0dc45c2fcb6a335696c7bb05f03a8521c155b50bf32421256155e98df1832d7b26959ab2c3fac2085405d2d06d43fd79d777e527029299c974
-
SSDEEP
768:glknKpbdrHYrMue8q7QPX+5xtekEd/68/dgALAoW8NFdU5PX+SSL0LHVfDM:gluKpbdrHYrMue8q7QPX+5xtekEdi8/V
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action
Files
-
TRUE_doc.xls.xls windows office2003