6c3e5925d8e06407985437042f32ceb8371717fb36f791a7590d7efa02175301[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

6c3e5925d8e06407985437042f32ceb8371717fb36f791a7590d7efa02175301.xlsx
Size

4.8MB
MD5

58a77cca9792ae42005c5b1c66419777
SHA1

d95bf925ca17d8c9ea8e3ab503d42b7fa51e0eee
SHA256

6c3e5925d8e06407985437042f32ceb8371717fb36f791a7590d7efa02175301
SHA512

7cdbe4ad0d8581a9f1c5320a783fcafef9a57d3ddd8fa464744f272a6d5fc0b6cef654147a40a0db636d2f26f22a567aed6b5df2bd9cd66d737fb0e79ef67c3a
SSDEEP

98304:kv4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXX3:kvpvFa+g8RWLdPk/84tCEr0RtNiC5eS6

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

6c3e5925d8e06407985437042f32ceb8371717fb36f791a7590d7efa02175301.xlsx
.xls .xlsx windows office2003