Behavioral task
behavioral1
Sample
FillDocumentsxla.xls
Resource
win7-20230703-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
FillDocumentsxla.xls
Resource
win10v2004-20230703-en
6 signatures
150 seconds
General
-
Target
FillDocumentsxla.xla
-
Size
3.0MB
-
MD5
c04e0a8245e075a3a1ee1e4983173e48
-
SHA1
98e45bb1d33db2450ad75ee42c83a76903034f41
-
SHA256
98aea09e6fa0164de61f54f066971d819ecf56e9d31d7c30f0b10c0d5f071bcc
-
SHA512
e9c053e8e0462de2d80ab56055a6d4b8c00899735ac31f258370c9e69ecd6562d7b28c3655835cf83b19cc1c95a73b9bc710630f8500d1a1388aceb81353078a
-
SSDEEP
12288:9rYx9HoN8gJ6ZeHyyGTAKWmLQHSUEKOiolT9VDTXuL59knAtbtN+FlGREkmcKI02:90yjr7mofreKf
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
FillDocumentsxla.xla.xls .xla windows office2003
thisWB
sh
FP