796409250cfb873f26a814361b5c27c030b5f8e4afc5bba11a9866ab61ba15e5

General

Target

796409250cfb873f26a814361b5c27c030b5f8e4afc5bba11a9866ab61ba15e5
Size

57KB
MD5

350628b96da81b057576d8fdf76ee672
SHA1

a8a9e74fbfec12985d4623c5895602ebed90af5f
SHA256

796409250cfb873f26a814361b5c27c030b5f8e4afc5bba11a9866ab61ba15e5
SHA512

935a53d82fc96c408e10ee8d41c93d16f16b404bb3f53da679679703de95a27615d7e6a06466de6ac05f88b233c27818e14a4a37be3f888aa56812f705446d99
SSDEEP

1536:qXk3hbdlylKsgqopeJBWhZFGkE+cL2NdANcw+pmgaCI2S:qXk3hbdlylKsgqopeJBWhZFGkE+cL2N8

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

796409250cfb873f26a814361b5c27c030b5f8e4afc5bba11a9866ab61ba15e5
.xls windows office2003