General

  • Target

    ap-file-xlwings.xlam--228937423.zip

  • Size

    230KB

  • MD5

    6f9bc2a0f48d89f6b0f0da3c0aeeb44d

  • SHA1

    3ca71c60e44c91f5d989b39f99171ad617f0aa23

  • SHA256

    0c3a9ab87070c2e48f344356a70be1958b1e2cf404f5315ad6b0e2135a669694

  • SHA512

    eeae2349106530a93b67bebe5221fd18297430ab019f12b292b8294b54decbd67676718588c514b98dcbcd4c194a22a390aa32d7d70e1c8116e08e05f8784799

  • SSDEEP

    6144:7nQPtEFGcUoiGs19rpGmjANiiJ9erreG4kI5iV34jHJRSzWzZHoedwg:7ItEsKs3phmi8ergP4VI+i1

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • ap-file-xlwings.xlam--228937423.zip
    .zip

    Password: cautionhandlewithcare

  • xlwings.xlam
    .xlam office2007

    ThisWorkbook

    Sheet1

    WebHelpers

    License

    Dictionary

    IWebAuthenticator

    Utils

    RibbonXlwings

    Config

    WebClient

    WebRequest

    Main

    Remote

    Extensions

    WebResponse

  • xlwings.xlam.METADATA