jaffacakes118_2940fbc644336605cf9106a9582738a7d291048f6102c370a08817c5af08a8d1[.]bin

Reason

office: non-rc4 encrypted document not supported

General

Target
jaffacakes118_2940fbc644336605cf9106a9582738a7d291048f6102c370a08817c5af08a8d1.bin
Size 1.8MB
Sample260930-nemm3adh86
SHA256 2940fbc644336605cf9106a9582738a7d291048f6102c370a08817c5af08a8d1
MD5 6375a562ba7144d0d0e3568b62aa988f
SHA1 f26e566a16072dee0ffbe26216a840f315cbc98d
SHA512 745a6955e0acac2876cc8cd55c13497fd7e95cde096433a453bfce7941a1d339ff71584a4a8dd2b7bd7f3e381a88da5105272728183a7d49dbc080201fc5742d
SSDEEP 24576:WuHOJBvF+5yS+s1GvxGC8xyTaWOit/vsMF:WuHCF+50s4vxGC8kQFM
TLSH
T1F095C5947191D65EC6640A335C9ABFFA63387C098F1E8683B01A736D6C7B718D747B80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

jaffacakes118_2940fbc644336605cf9106a9582738a7d291048f6102c370a08817c5af08a8d1.bin

.xls 1.8MB

SHA256 2940fbc644336605cf9106a9582738a7d291048f6102c370a08817c5af08a8d1
MD5 6375a562ba7144d0d0e3568b62aa988f
SHA1 f26e566a16072dee0ffbe26216a840f315cbc98d
SHA512 745a6955e0acac2876cc8cd55c13497fd7e95cde096433a453bfce7941a1d339ff71584a4a8dd2b7bd7f3e381a88da5105272728183a7d49dbc080201fc5742d
SSDEEP 24576:WuHOJBvF+5yS+s1GvxGC8xyTaWOit/vsMF:WuHCF+50s4vxGC8kQFM
TLSH
T1F095C5947191D65EC6640A335C9ABFFA63387C098F1E8683B01A736D6C7B718D747B80
MD5 SHA1 SHA512 SSDEEP TLSH

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action