5e52b1989c42e139ae017a8ff2d085d223933a164a58d96fedaba4bae76084a6[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

5e52b1989c42e139ae017a8ff2d085d223933a164a58d96fedaba4bae76084a6.xlsx
Size

4.8MB
MD5

6d629b26ed3e22019869fa9a46ec992e
SHA1

a02c727a10ac2b67cc8cf75928a6c1dc5b021dd3
SHA256

5e52b1989c42e139ae017a8ff2d085d223933a164a58d96fedaba4bae76084a6
SHA512

73e5247dd893338a4f41acef0c60385c9b867b6e897a79b6a2f9d63443cf42475d686cbfeed459371bdc06905e55634834f9ae09a480447a8bc134154c9a0974
SSDEEP

98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXN:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eS8

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

5e52b1989c42e139ae017a8ff2d085d223933a164a58d96fedaba4bae76084a6.xlsx
.xls .xlsx windows office2003