Behavioral task
behavioral1
Sample
STARPOINT.xls
Resource
win7-20231215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
STARPOINT.xls
Resource
win10v2004-20231215-en
windows10-2004-x64
5 signatures
150 seconds
Errors
Reason
office: non-rc4 encrypted document not supported
General
-
Target
STARPOINT.xls
-
Size
1.8MB
-
MD5
623e58238303e762590add538db65489
-
SHA1
734dc1ae8508b59607562f890744f650d81a7ca3
-
SHA256
3a3ffec4ee5b5815a31a57c8340d2ff80214558dae78d9551fcfe908418feec2
-
SHA512
7f9c614de786dc01bfd036acfbabaab4a6b38aea256904881fd89e41cdd0ee4b245595ddae59f4085f12c173b8a72c260937f3ac3945bd2e7456ce59c11233dc
-
SSDEEP
24576:9Txrx/mqjYuTSWtb0NTVfZPP5R1xf/Hnkpb47FNFJq+yUjXfi2bVIxIulzVVQ4l1:97+qMuTSWtGphn5P1Ejimw3
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
STARPOINT.xls.xls windows office2003