320eabf7285a400c81f832ee39933d24f7de33c0afc8bcb1c3e9081124ad1260[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

320eabf7285a400c81f832ee39933d24f7de33c0afc8bcb1c3e9081124ad1260.xlsx
Size

4.8MB
MD5

faeffbc79fa80f604a53a34f2ff8f7df
SHA1

c7dc1b89f320a92d15ba48060757b03daad6f2b7
SHA256

320eabf7285a400c81f832ee39933d24f7de33c0afc8bcb1c3e9081124ad1260
SHA512

7ac4de67056b3c6d01183ae4530699f1c833d4fc61cc62172a7d55b34ce385e1558e7444e0ce518573328ad852d13e75f68e57e4336856d1e749b45323d03166
SSDEEP

98304:kv4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXs:kvpvFa+g8RWLdPk/84tCEr0RtNiC5eS1

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

320eabf7285a400c81f832ee39933d24f7de33c0afc8bcb1c3e9081124ad1260.xlsx
.xls .xlsx windows office2003