Nicht bestätigt 256403[.]crdownload

Reason

office: non-rc4 encrypted document not supported

General

Target

Nicht bestätigt 256403.crdownload
Size

4.5MB
MD5

13608f885ee56d43573c7825873d46e5
SHA1

5b65ddd74b772af260d8b49ed5d8c6935b90e83e
SHA256

b60cdce6e8371ad4f390df9291115b440e48d5f217c10e1e77e34eaebaba3225
SHA512

1dd5ea31ef2025d71bc49a6b1d340fe7d3dc6122ab1aefbd1feb97f824d83b4f3cf8d6c0b7552a9bc1180958c43f6d8c305dfde9acefa9fa871aab932f063987
SSDEEP

98304:NlOkuqmYivpdwDkJMvd8r33A9nAnQMUwWlL6LIJRhpqjhas:NlPTmzQkuM33pnJUwmL+IJRhwj3

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action