Overview

overview

8

Static

static

8

www.poznan...pl.xls

windows7-x64

1

www.poznan...pl.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    www.poznan.pl_mim_public_cuw_attachments.att_co=show&id=6218&instance=1044&lang=pl.xls

  • Size

    627KB

  • MD5

    3ceac8133271a4acf8527113b59a09d2

  • SHA1

    36926c68fb886f4cda727ca90554225087a504bd

  • SHA256

    1df7ab6b636a2fbd9ebb22a91a43531b941d8e15dbba66c5febc0b05be28feb9

  • SHA512

    a9f245f3b57388bb19ce9f40b9aec5cf176458f432105f88192484613fd10ebdb2e39d1d6e2577ff7041ac3875e795c3201cc896a4d504f7873dd6173320395f

  • SSDEEP

    12288:daNQWlEF9zic3YiA7BpXWEHg0DlNUIWeB+Zn:y10qpXWEHpDlNUIW/n

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action

Files

  • www.poznan.pl_mim_public_cuw_attachments.att_co=show&id=6218&instance=1044&lang=pl.xls
    .xls windows office2003