Managed XDR

e84d1514f587c3c3204cf0...39b11f17a5c3c-1125.xls — malware analysis report

File info

Filename
e84d1514f587c3c3204cf079f0370728ae64f539b11f17a5c3c-1125.xls
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, Code page: 936, Last Saved By: Administrator, Create Time/Date: Wed Sep 13 11:21:00 2006, Last Saved Time/Date: Mon Nov 25 02:28:55 2024
File size
23 KB
First seen
Last seen

Environment

winxp/x86 en

Hashes

SHA1
4f4e1d57d34a0be2daeab6f1d3b5c8f316c80e70
SHA256
3c746007c45b86d32884cbfcc5557f6726ef40f26a26c396b3aefe61986bbcd5
MD5
83fb2500b2029a4ae3d038d04319e35a

Signatures

Execution

T1203 office_exploit_crash: Microsoft Office process crashes (failed exploitation of a vulnerability is possible)
T1064 office_macros: The document contains macroses (total: 3)

Defense Evasion

T1064 office_macros: The document contains macroses (total: 3)

Credential Access

T1555.003 cookie_files: Accesses cookie files
T1552 cookie_files: Accesses cookie files

Other

yara_rules: Static rules
modifies_certs: Attempts to generate or modify system certificates
office_summary: The document contains suspicious metadata
creates_in_programdata: Creates files in the ProgramData directory