Behavioral task
behavioral1
Sample
1f061b7730925d437b3a8fc90e9a09e4.xls
Resource
win7-20230220-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f061b7730925d437b3a8fc90e9a09e4.xls
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Errors
Reason
office: non-rc4 encrypted document not supported
General
-
Target
1f061b7730925d437b3a8fc90e9a09e4
-
Size
3.9MB
-
MD5
1f061b7730925d437b3a8fc90e9a09e4
-
SHA1
d91710ecc96a52417b7b22454caac133e2581eba
-
SHA256
96a053f869d1c5cec6578ddf6591fa7da0b693292d4bcb476fae176864a37ba4
-
SHA512
441e4afc7143b398127aea8da567701e0e888a3aee6b17b78920a0ead10967192d2c8cf4cd7866d9c72dc0d68f5d2099b6e4128d9678c082766f8aa4dece7f66
-
SSDEEP
98304:kfYH6pDzvdhHAQ2AATFjJxCxK3oH3VpNzfAKs:5MDz1OnxnCI0
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
1f061b7730925d437b3a8fc90e9a09e4.xls windows office2003