Overview

overview

8

Static

static

8

bip.poznan...pl.xls

windows7-x64

1

bip.poznan...pl.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bip.poznan.pl_public_bip_attachments.html_co=show&id=50294&instance=1044&lang=pl.xls

  • Size

    601KB

  • MD5

    888f6927e62e6a9b90b7732a398c679d

  • SHA1

    f4df508abb8fe19839230cacb0226794d4306089

  • SHA256

    880ce308e83e84c956d02db4694232c14d0c22d11a325adca696b13279e3280d

  • SHA512

    282bad72bf3e2bb7275edd76166f63e05e9b7fc3d1c46ac53e496c60f28c0f7f119e326d9f4936b3d974cf351145d7ae0fd7684623cc75f17e92803edc77e2be

  • SSDEEP

    12288:MaM+WSf7u9kMEUZtIGZbDQFASZ5lhL+eBcLB:yD97IGZbDQFt7lhL+rB

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action

Files

  • bip.poznan.pl_public_bip_attachments.html_co=show&id=50294&instance=1044&lang=pl.xls
    .xls windows office2003