Behavioral task
behavioral1
Sample
3272023.xls
Resource
win7-20230220-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
3272023.xls
Resource
win10v2004-20230220-en
windows10-2004-x64
5 signatures
150 seconds
General
-
Target
3272023.xls
-
Size
84KB
-
MD5
870113986bdda1aa22c44ededf987447
-
SHA1
0ad93b69557f0e2b13d9e72f10939527c464196b
-
SHA256
417b21104c212d3c6443c30960b43bfa3c65dda72061a5a2c0246ff97930eb18
-
SHA512
0bc1c0d4bad561c831e0f3eafd228f6cbb7cdf35388fe750b5c2040e1b9c30460f0988f4d7caf11f63bcfc582a1319671dfb50286a3a389fb96bde55e32ca582
-
SSDEEP
1536:pTxEtjPOtioVjDGUU1qfDlaGGx+cL2QnAicmW+oVtHf6az8d53jX2wT5dFBoCrFo:pTxEtjPOtioVjDGUU1qfDlaGGx+cL2Qf
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
3272023.xls.xls windows office2003
Module1
ThisWorkbook
Sheet1
Sheet2
Sheet3