0b260e735eeec8d411cc48aaf8dc2c7f60e6d56bb44f0ab7579210ee61e67777[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

0b260e735eeec8d411cc48aaf8dc2c7f60e6d56bb44f0ab7579210ee61e67777.xlsx
Size

4.8MB
MD5

df081f7edccfde43c041f4cb2fb81cc1
SHA1

106be4da529aa33e237d092c210fc70c46bed00b
SHA256

0b260e735eeec8d411cc48aaf8dc2c7f60e6d56bb44f0ab7579210ee61e67777
SHA512

db67df1ad90f1b7ab1f03bad5f26cdfc9590dff300d9c40dd25d093098a33ffb7650c0e886664298229a71de262e4617228be55d7829d826e86741348d883a0c
SSDEEP

98304:Vv4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXb:VvpvFa+g8RWLdPk/84tCEr0RtNiC5eSi

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

0b260e735eeec8d411cc48aaf8dc2c7f60e6d56bb44f0ab7579210ee61e67777.xlsx
.xls .xlsx windows office2003