fb2a9dcfcf41c493fb7348ff867bb3cad9962a04c9dfd5b1afa115f7ff737346

Reason

office: non-rc4 encrypted document not supported

General

Target
fb2a9dcfcf41c493fb7348ff867bb3cad9962a04c9dfd5b1afa115f7ff737346
Size 7.8MB
Sample240410-sf2wlafd2v
SHA256 fb2a9dcfcf41c493fb7348ff867bb3cad9962a04c9dfd5b1afa115f7ff737346
MD5 bcc3a8f3dd5221bb296eecaa2037eafb
SHA1 02a79b0d7bc9f62fe35916ed34797d609ede5a4f
SHA512 97063d7694aa159a5b95efbe7e522ede24d99ffc284eb5026302351a2502e19e340c7bab05d1a014bccdf75dd8a6f7b5df5d1c46a666271901748ace11066615
SSDEEP 196608:NrnRRXWiSWcNhiA6OS9EEX07IT7D8JJpMhKQZwQJlzihvcRa:NNcUyzS9EEXcS85MQMXl2R1
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

SHA256 fb2a9dcfcf41c493fb7348ff867bb3cad9962a04c9dfd5b1afa115f7ff737346
MD5 bcc3a8f3dd5221bb296eecaa2037eafb
SHA1 02a79b0d7bc9f62fe35916ed34797d609ede5a4f
SHA512 97063d7694aa159a5b95efbe7e522ede24d99ffc284eb5026302351a2502e19e340c7bab05d1a014bccdf75dd8a6f7b5df5d1c46a666271901748ace11066615
SSDEEP 196608:NrnRRXWiSWcNhiA6OS9EEX07IT7D8JJpMhKQZwQJlzihvcRa:NNcUyzS9EEXcS85MQMXl2R1
MD5 SHA1 SHA512 SSDEEP

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action