MF_PERIOD_END_P03_21[.]12[.]2023[.]xls

Reason

office: non-rc4 encrypted document not supported

General

Target

MF_PERIOD_END_P03_21.12.2023.xls
Size

1.2MB
MD5

6bb9faa320e204be025f24463273b7f1
SHA1

a002aee66a5a66aabbbeccb4eaf26d37f46c17c2
SHA256

621a5624b7cfe8145e4ad55ba480ea990e5be16edf449fc9aa695c68175ef5a6
SHA512

81730e7e9f9f35aef3635662bdd7091913f0ed5b9030d1f7cb3a0b3f55cf4a842a37838cf8c5c0a8f8fb1c81f1133ee78b764b4dd6e6136c8b27b151d88b9c8c
SSDEEP

24576:Oz8xFpA92APHkTvQiUeXm9ki4fRwD2/Hn6YWczqY:OzmPEPHOvQ7edXWcj

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action