ab330d62f802a2573ccc6dce655a84bea7c54fa7002c94e7a0365ba1bad2cf37[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

ab330d62f802a2573ccc6dce655a84bea7c54fa7002c94e7a0365ba1bad2cf37.xlsx
Size

4.8MB
MD5

5a85f0bd825cbc17e91cf394238c308b
SHA1

57d67e78831df40f665b585ece367dea034d8a02
SHA256

ab330d62f802a2573ccc6dce655a84bea7c54fa7002c94e7a0365ba1bad2cf37
SHA512

c6f79f019a180364fd2e219c3a872173642c79e974da4fc3741f58ebfb1094ab15c365dfbdb2bcea7eff78ec2b6bbb32eb30cbfae3218d01bf84ccdb2e33295b
SSDEEP

98304:Jv4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXX7:JvpvFa+g8RWLdPk/84tCEr0RtNiC5eSe

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

ab330d62f802a2573ccc6dce655a84bea7c54fa7002c94e7a0365ba1bad2cf37.xlsx
.xls .xlsx windows office2003