Behavioral task
behavioral1
Sample
981ed92e6305f88f8d5760d9d400deff.xls
Resource
win7-20230712-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
981ed92e6305f88f8d5760d9d400deff.xls
Resource
win10v2004-20230703-en
10 signatures
150 seconds
General
-
Target
981ed92e6305f88f8d5760d9d400deff.xla
-
Size
1.1MB
-
MD5
981ed92e6305f88f8d5760d9d400deff
-
SHA1
80c9da43abc1185ca9faddd565504e7a2531fc04
-
SHA256
cf21151adac0ccb8873bb29176cecea7e1271d9fe1f463127eb5d223b2595a1d
-
SHA512
f5ac065e99eb64e97ed0262adf6c412145bba24e81a4ef2e630781fbbdfa39b73c4bed4b669cbbc3d3bf3ff4c7e7cb3c3e248efa848bdc2e9c51609634b4647f
-
SSDEEP
12288:PrFSMkMFgUYz36nzCUs6GJFEGmed9w6B34AMZwk9b7FDXMdy7B3goZ57:PrFngrz36zyrRD3JcwO5X9t
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
981ed92e6305f88f8d5760d9d400deff.xla.xls .xla windows office2003
SheetPreCalc
ThisWorkbook
main
registry
version
SheetCD
OS_Version
SheetVersion710
SheetVersion720
SheetVersion640
support
SheetPC
ServiceStatus
SheetVersion730
SheetVersion740
modDigitalSignatureExists
modVerifyFileSignature
SheetVersion750
SheetVersion760
SheetVersion770