46897e102327e7b4f5cd3bab5a8a34328190232aa64201b32b1f11f58de09696[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

46897e102327e7b4f5cd3bab5a8a34328190232aa64201b32b1f11f58de09696.xlsx
Size

4.8MB
MD5

8e06b45888197e6cc69d9edb18d35813
SHA1

ec4d1060b8ec62e5b77473dc40584f17866feea1
SHA256

46897e102327e7b4f5cd3bab5a8a34328190232aa64201b32b1f11f58de09696
SHA512

7207498231dd7b9295382aa45c1a49d91cf831979079b8f9991ccc0ad3b1b77004db6a5af2520945ccc277ff1347529543d0a11576ff35f1b4c3fedf311d537d
SSDEEP

98304:3v4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXX:3vpvFa+g8RWLdPk/84tCEr0RtNiC5eSq

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

46897e102327e7b4f5cd3bab5a8a34328190232aa64201b32b1f11f58de09696.xlsx
.xls .xlsx windows office2003