2d1fcf14c85e2ad41ab67c74ec3aa8084d8bf8b07d36390195fd364c5699e4d6[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

2d1fcf14c85e2ad41ab67c74ec3aa8084d8bf8b07d36390195fd364c5699e4d6.xlsx
Size

4.8MB
MD5

feb2520f08de01370dd6075e59a2930b
SHA1

8e195abf4c82c1bc7405bd86be7d85933d00b458
SHA256

2d1fcf14c85e2ad41ab67c74ec3aa8084d8bf8b07d36390195fd364c5699e4d6
SHA512

d39bcfa78721d6bd61f09d0df08d559958983c21032d87d1ee868384bdc8b0dfa3a8361cc1e0a5981c097546be955c0e72e888602001139657654550a700eef8
SSDEEP

98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXX0:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eSd

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

2d1fcf14c85e2ad41ab67c74ec3aa8084d8bf8b07d36390195fd364c5699e4d6.xlsx
.xls .xlsx windows office2003