Reserva[.]xls | Triage

Sharing

General

Target

Reserva.xls
Size

754KB
MD5

3bcf5f59bf2674ed3d5873037e6facf9
SHA1

c30056cf0d3d6d484bc70d90e25797d314ad130d
SHA256

23a43356377f3202cc3dfc099e0966881e4069d7159ff7f8c8ea5638ecb93ae7
SHA512

fa3a9d4ee97a6a8f9d23bb17c2b466db85c01b0837f45c0150d35053db9616fc68d23e0ec09b3f3e6a5729c633496c8031ad208df71b2b679d8bbfcd1610787e
SSDEEP

12288:JoPIj/NtKmSvwtfNsHv38KHa1eYNqscnYwclMZWeVQOgiHviwa4cekHW:wIT6uNsHv3shPcnY5uZN++HKwnAW

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Reserva.xls
.xls windows office2003

Módulo1

EstaPastaDeTrabalho

Planilha1