Behavioral task
behavioral1
Sample
mrpro517.xls
Resource
win10-20220812-en
windows10-1703-x64
4 signatures
150 seconds
General
-
Target
mrpro517.xla
-
Size
5.4MB
-
MD5
628812f5751d7cbabc97d6dabba711da
-
SHA1
5a096720b0c32437238112127a127d2f140bc0d6
-
SHA256
a16392bafb0087573a23e61a8b6718d799e9e035d727b8480e6ef17a1f3a1e35
-
SHA512
41fbc125fc44a85947dde8eb0fa54395af6423989fd1b8d87b562e11f86cdb60a3af63fbb7c71ee2e309e5b8538632ef0ba65b696ab886d64ffeab566c4237e6
-
SSDEEP
49152:rtsdQchJH/39jpO5H2xOxVnyHfv7Iia8MeuKtOrUbnHMIlf/G0RD:pUTXHkfIl3Gi
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
mrpro517.xla.xls .xla windows office2003
Sheet1
Sheet2
Sheet3
ThisWorkbook
Module1
Module2
Module3