Behavioral task
behavioral1
Sample
P10_Return_XLS.xls
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
P10_Return_XLS.xls
Resource
win10v2004-20230703-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
P10_Return_XLS.xls
-
Size
4.3MB
-
MD5
504ae0911586df80721873efcd8fee16
-
SHA1
2cb9d3d72fb2ed4dd7d69774f9132df013b7e270
-
SHA256
285aeb7be25058b48c82a45a0989dbb916e918aaaa3dbae02c1af67b45a10523
-
SHA512
305f8eccdec3a12526cb5384898c134028e16eb703bf5be983e5abafcb1523d1d0f8ec0b44644856b3982c6c5a36eb5e3a1ca9a52441a4a554be71a08730c604
-
SSDEEP
98304:vPe/wk3JRWDsNpgLB6zMKs4oKYSiWb4B3ARnN+lJvL+M:vPaJRWQNpgLB6zMKs4oKYSiWb4B3ARnC
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
P10_Return_XLS.xls.xls windows office2003
ThisWorkbook
Sheet1
Sheet2
Sheet3
Sheet4
Sheet20
Sheet7
Sheet8
Sheet9
Sheet10
Sheet5
Module1
Sheet19
Sheet13
Sheet14
Sheet15
Sheet16
Sheet17
Sheet18
Sheet11
Module2
CSHA256
Module3
Sheet6
Sheet12
Sheet21
Sheet22