0488cc8cbf54bf2881dfd5014f2413a7f0de1bec9e9546e00157e46045531d4c

Reason

office: non-rc4 encrypted document not supported

General

Target

0488cc8cbf54bf2881dfd5014f2413a7f0de1bec9e9546e00157e46045531d4c
Size

1.1MB
MD5

21029b0c3673abfc90d5f7e02108c6ba
SHA1

28a7bfa9640b4eedaf41c00d884a4443ee5b7fbb
SHA256

0488cc8cbf54bf2881dfd5014f2413a7f0de1bec9e9546e00157e46045531d4c
SHA512

8b5bad9815c73881b3118fd990487afc9a3cd67eb9b1140e4bb56fed680fb560159f819a3ed2a6015dba006a68f705354698e5de03cd07a5c926543c1360c730
SSDEEP

24576:6Jysjuukn+3h47cJKtwia4ZFP1syBQBo0I0abm1INCcZ7DxC:tsCuCSKLaMDFQBRtaBNCcZ7DA

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

0488cc8cbf54bf2881dfd5014f2413a7f0de1bec9e9546e00157e46045531d4c
.xls windows office2003