Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RFQ #10849027.xls
Resource
win7-20230703-en
14 signatures
1200 seconds
Behavioral task
behavioral2
Sample
RFQ #10849027.xls
Resource
win10v2004-20230703-en
8 signatures
1200 seconds
General
-
Target
D9510E73-FF9E-7A05-8EB6-72DB752EA932.eml
-
Size
1.5MB
-
MD5
96819d4561dc72d108c85d99fcc60e26
-
SHA1
f2282ef853af83ae6cd47114424fd6517300d4cf
-
SHA256
4ff5ad3a28e548b75c040872ad111783a5ff7250bc04e8a4a5ddcae4c76f8cb8
-
SHA512
10186bf16d538d1f7bd64c59ca40e93f6b40d110fa564ab69b23132eec72732f451f6601910390c1a54e0e050b3370cb5b849586f26b69db4803f4b426170711
-
SSDEEP
24576:J7c+WpI9qxsA80eMYIrc3gftB1lnKteKVAi4plX7qvJPawEEJf:pcdxXT5QBbULAxJ
Score
1/10
Malware Config
Signatures
-
Office document contains embedded OLE objects 1 IoCs
Detected embedded OLE objects in Office documents.
resource yara_rule static1/unpack001/RFQ #10849027.xls office_ole_embedded
Files
-
D9510E73-FF9E-7A05-8EB6-72DB752EA932.eml.eml
-
http://www.tivoly.com
-
-
RFQ #10849027.xls.xls .pdf windows office2003
-
email-html-2.txt.html
-
email-plain-1.txt