Behavioral task
behavioral1
Sample
81fb2fbd536947e0e6067c9ed72dbebb35800cc0cee521be88f54f7eb57c86ef.xls
Resource
win10v2004-20230220-en
5 signatures
150 seconds
General
-
Target
List of Compromised Systems.xls.zip
-
Size
129KB
-
MD5
6ae239edbcebc6a65ec17b14fe862552
-
SHA1
6193129954e59e8c03fd89fc3ceea194969dc674
-
SHA256
1e0bcd7b06c0b2767895ef8417af16972c8af7be802a7015f991080fdb57bbbf
-
SHA512
8151a703fd2a2d0601821056eb595d4d1b305ffee08a37daa9dc63d54f16e7a5625b29be4f9bdebaf8036e677cac04cb00869a60692b598c30b0aeec8ffbf0ef
-
SSDEEP
3072:mIx7/qrhAvCd43Dmcs50J9/OOlenUzT0SPE5:bb7Cdzc20b1enM0Ss5
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule static1/unpack001/81fb2fbd536947e0e6067c9ed72dbebb35800cc0cee521be88f54f7eb57c86ef office_macro_on_action -
resource static1/unpack001/81fb2fbd536947e0e6067c9ed72dbebb35800cc0cee521be88f54f7eb57c86ef
Files
-
List of Compromised Systems.xls.zip.zip
Password: infected
-
81fb2fbd536947e0e6067c9ed72dbebb35800cc0cee521be88f54f7eb57c86ef.xls windows office2003
ThisWorkbook
Sheet1
Module1
Sheet2