629cac83fc6f9e21d358ceade9955f0140f281fd6ffbd975b270fa7f5e294235[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

629cac83fc6f9e21d358ceade9955f0140f281fd6ffbd975b270fa7f5e294235.xlsx
Size

4.8MB
MD5

57d283006e8c3c32d3023166da6d0862
SHA1

e9947c819cfb754cfeb8d8ad85ca0eaa9d235702
SHA256

629cac83fc6f9e21d358ceade9955f0140f281fd6ffbd975b270fa7f5e294235
SHA512

0535888ecbd7008b676569d92d7a1b0ab3bc89867c1e7ad78c680bc1516f1238c4494759d83f754674bdc1422a93ef603a23fbcbda8c6379134579f5e9d7ca87
SSDEEP

98304:Vv4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXu:VvpvFa+g8RWLdPk/84tCEr0RtNiC5eS3

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

629cac83fc6f9e21d358ceade9955f0140f281fd6ffbd975b270fa7f5e294235.xlsx
.xls .xlsx windows office2003