Overview

overview

10

Static

static

8

S-P Constr...nc.xls

windows7-x64

10

S-P Constr...nc.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65fb927ebb54d82716712049f4a6821fed9fb4d5cbf64558f582eee6cf5d0020

  • Size

    60KB

  • MD5

    a6f32a28058b1af42cc8a69dfaec823d

  • SHA1

    075e700393331a7e20c2e49658c14f233d762c6b

  • SHA256

    65fb927ebb54d82716712049f4a6821fed9fb4d5cbf64558f582eee6cf5d0020

  • SHA512

    a26b631ba0ff20e5774add9c38db4cf70978fd9b94529a840a0726ab9a1bbaa69ad90c2b48dbc5267e3da2c997fe65d4bddf640ef5696df0e83350fea2cd27db

  • SSDEEP

    1536:PyAcDj+r/KexKIxLJSXOvj0q2tokUkRFtvHaMCRDr:dC+7K3Ixo3q2eRoF9CRDr

Score
8/10
macroxlm

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

    macroxlm

Files

  • 65fb927ebb54d82716712049f4a6821fed9fb4d5cbf64558f582eee6cf5d0020
    .zip

    Password: infected

  • S-P Construction of St. Paul Inc.xls
    .xls windows office2003