e1cb3994f6a83b68870aa3b00f6d507d851868e3e5ea9eddac9b466174d89916_JC[.]xls

Reason

office: non-rc4 encrypted document not supported

General

Target

e1cb3994f6a83b68870aa3b00f6d507d851868e3e5ea9eddac9b466174d89916_JC.xls
Size

1.7MB
MD5

695d279ff2204e57c4a97d0842a146da
SHA1

715895f885353d98687ff8267f416c99e7fce9d2
SHA256

e1cb3994f6a83b68870aa3b00f6d507d851868e3e5ea9eddac9b466174d89916
SHA512

341c145b94a51fe0912d73dcca6bb87af8f758ca2f8916b7c730ec049c53e680eb4f7e793093048eeeaa1acec1dcf0513376f1896b14da226ac46d331a711a08
SSDEEP

24576:nT9+hG2EGuZuk0hnh4Z/t8qzZuM+nuYqAuFFFmwRWrnR6IwIvlteqFnlzIOI+lmE:nTklEG3P3q/aLnYADwRWrnRbcfKV

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

e1cb3994f6a83b68870aa3b00f6d507d851868e3e5ea9eddac9b466174d89916_JC.xls
.xls windows office2003