Behavioral task
behavioral1
Sample
COBALTIrelandUF2023.12.01v2.xls
Resource
win7-20240903-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
COBALTIrelandUF2023.12.01v2.xls
Resource
win10v2004-20240802-en
5 signatures
150 seconds
General
-
Target
COBALTIrelandUF2023.12.01v2.xls
-
Size
1.3MB
-
MD5
ead8394bde569e91cb3b164f099185cf
-
SHA1
92a075703e5fc1d7104225653c8ca1ada6413b82
-
SHA256
0065ec51b19f9b929b9dcdd3f8d9f1c1b5e659bac376a3913d85f25d6c1ff3d5
-
SHA512
533b0ebe73ab485fa4feade23cdb599755fdd150ebea4e26c35b368e1102cc17197d209d0a08ae0daa5b56ac68a06dfe953cc21240a65c68c536c5afa2e30cc2
-
SSDEEP
6144:h4OkGGNn+XG/fl7XfQhMSiZO2O5KBPwESpGVTNc7iM60ON5+Eb:GnV/t7IhMStKB67L6/N5+Eb
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action
Files
-
COBALTIrelandUF2023.12.01v2.xls.xls windows office2003