4eecfb56215fdcad2fdb58a1b2e5589edc0c7ce13bd838fcdacfe900c5fc8ed6[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

4eecfb56215fdcad2fdb58a1b2e5589edc0c7ce13bd838fcdacfe900c5fc8ed6.xlsx
Size

4.8MB
MD5

41cab462b5cc1927f53d355cf04225e3
SHA1

21e485a205b85b0941f5f710c0b9ab669a2e7558
SHA256

4eecfb56215fdcad2fdb58a1b2e5589edc0c7ce13bd838fcdacfe900c5fc8ed6
SHA512

a0e1628b93685e4db465d1ee1590117088317459f089cc6b26d4fcfc42fe56ce4d18ceae4eb988c0655c40bd578aa28edb4c3cb84e0f2f72b7b11832f1eb6f8d
SSDEEP

98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXQ:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eSd

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

4eecfb56215fdcad2fdb58a1b2e5589edc0c7ce13bd838fcdacfe900c5fc8ed6.xlsx
.xls .xlsx windows office2003