bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b[.]xlsx

Reason

office: non-rc4 encrypted document not supported

General

Target

bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b.xlsx
Size

4.8MB
MD5

e974bb813319a27e4dd8da964053e3e4
SHA1

e8ea4fa32e8dcdabdd6dd672ec28c888656bbecd
SHA256

bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b
SHA512

a220ea5c428f240d776740fbc27d13f066f37cae820b2d2438131be672b7b7266797267d845aaf4ed1b3cbbd882a94149adfbbc3c4d2f436358e77dee255e7d5
SSDEEP

98304:3v4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXa:3vpvFa+g8RWLdPk/84tCEr0RtNiC5eSz

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b.xlsx
.xls .xlsx windows office2003