119dc0a2a5e296e3a5e49a73b884a20b28670ade9695551f9a08cfada50c6d06[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

119dc0a2a5e296e3a5e49a73b884a20b28670ade9695551f9a08cfada50c6d06.xlsx
Size

4.8MB
MD5

71aad7afcb7206ca80d602c959e6ae74
SHA1

286f0d230c4b495bfd1db35b70ce5cb7d8ce9619
SHA256

119dc0a2a5e296e3a5e49a73b884a20b28670ade9695551f9a08cfada50c6d06
SHA512

8fef950367204eca9f4b357370314ee97800d405d88f4137e255766e560b39409a97a193c0a7b02d07931316fee8dca75145a86cf9ff72f35ffcb2674c16ee7e
SSDEEP

98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXP:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eSq

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

119dc0a2a5e296e3a5e49a73b884a20b28670ade9695551f9a08cfada50c6d06.xlsx
.xls .xlsx windows office2003