Behavioral task
behavioral1
Sample
480df7323f98c30e5115067e89ac59b8.xls
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
480df7323f98c30e5115067e89ac59b8.xls
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
480df7323f98c30e5115067e89ac59b8
-
Size
843KB
-
MD5
480df7323f98c30e5115067e89ac59b8
-
SHA1
76296078213f20991873c554242417c1acbc66ae
-
SHA256
1c8451931e7e259e80d4096f849acbd4dbc7d950cb1249f2ea8ca1094465da30
-
SHA512
d04aa9358e4b3156b3b9bccb5fc5693e6b57ea60a8eceae757f06f1f93db7d9d075805a724c7cd87fd8f75d5b539095cc3c05c3611a6606e170771b7675b62ea
-
SSDEEP
24576:VfBAr6+3gzcKTh9N41vGRw6uHywSc2RwHHDAXmC644jHrL8eRtU7ICVdqrg98vx0:BBxU
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
480df7323f98c30e5115067e89ac59b8.xls windows office2003
ThisWB
shtr
mod_CommonFunctions
mod_Main
mod_Functions
F_Progress
ProgressIndicator
FWF
F_About
mod_Lookup
mod_CheckFunctions
SpecialControl
AddinSettings
F_Settings
Fchar
mod_Translate
mod_About_NEW
F_FirstRun
Module2
Module1