Behavioral task
behavioral1
Sample
金融业务公司员工携程开卡-5.9(1).xls
Resource
win7-20240508-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
金融业务公司员工携程开卡-5.9(1).xls
Resource
win10v2004-20240508-en
5 signatures
150 seconds
General
-
Target
金融业务公司员工携程开卡-5.9(1).xls
-
Size
207KB
-
MD5
be395f0ac6fb28d5292e138624233e67
-
SHA1
eb2261b2e5e30d8deb03e476055d4809ddcd9417
-
SHA256
87c621a1081fdfa7921ec839a35779241216abdd69d7d8d7d378d7e0f00f6406
-
SHA512
dd37bce3af9ab7099d49f2f3d567bc39a3db85557b4e07f605261ed42242c090d3ed9daae02d0263d00e15fceefde5ee526c04831d73c16123800262baefd54b
-
SSDEEP
6144:nIH1OxQKxy5gfaf8kDfs3CeD3+Rv/191tuQa5xpy+N9tI7P:Z59UP
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
金融业务公司员工携程开卡-5.9(1).xls.xls windows office2003