a96c1790a836799583a85429e0e25163cb8f1b6634d5545cbbebdb10a235d1d4[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

a96c1790a836799583a85429e0e25163cb8f1b6634d5545cbbebdb10a235d1d4.xlsx
Size

4.8MB
MD5

6e2ff8046e5fc76d9a97630147d82bec
SHA1

9fceb90714cbe975042f4326ede5626e55419642
SHA256

a96c1790a836799583a85429e0e25163cb8f1b6634d5545cbbebdb10a235d1d4
SHA512

c9c40e1984fee53c04dbfb24b156ef77f624f1a29eac981c41b850e8f48f7d9967997a17ee3804fddc923428f6fd7ff1277dca7ad7f5e419a91edf256e621638
SSDEEP

98304:9v4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXg:9vpvFa+g8RWLdPk/84tCEr0RtNiC5eSJ

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

a96c1790a836799583a85429e0e25163cb8f1b6634d5545cbbebdb10a235d1d4.xlsx
.xls .xlsx windows office2003