Behavioral task
behavioral1
Sample
MARUPING VILLAGE PCS FILE 2024-03-07.xls
Resource
win7-20231129-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MARUPING VILLAGE PCS FILE 2024-03-07.xls
Resource
win10v2004-20240226-en
windows10-2004-x64
6 signatures
150 seconds
Errors
Reason
office: non-rc4 encrypted document not supported
General
-
Target
MARUPING VILLAGE PCS FILE 2024-03-07.xls
-
Size
3.1MB
-
MD5
c175fc3a902a3ec638bb23d7bf46f67e
-
SHA1
cfc89d2b16af27828fe8c3a80771498b29331ed5
-
SHA256
dad0cd931530181140f3cf709371909c2a19e7535649ff0a54da01917cbf4803
-
SHA512
9191c18ac6780748aef1c024fb761f6a9d69b75e830acac28e19f9f6a2e205b72a20b3165e9aa1b6f09a19142ba3337a7ce7c43c1b86bdd446d45cc2d0ac96c4
-
SSDEEP
98304:Ri1rP00DU9aIts11D8yGrAuhatYvA6EcN:RiJP0t9aV7M1hatFu
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
MARUPING VILLAGE PCS FILE 2024-03-07.xls.xls windows office2003