Managed XDR

spreadsheet.xls — malware analysis report

File info

Filename
spreadsheet.xls
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1252, Author: TELUS, Last Saved By: TELUS, Name of Creating Application: Microsoft Excel, Create Time/Date: Mon May 16 16:39:59 2011, Last Saved Time/Date: Mon May 16 16:41:27 2011, Security: 0
File size
16 KB
First seen
Last seen

Environment

winxp/x86 en

Hashes

SHA1
62f0af715ea60c4cf4185b963d5e1d3637d3e50f
SHA256
e8d4184a22411efdf67d91d2ccd5f6c35cfb234b584ef59e01b4517df2e54142
MD5
43b1c82b796a8008218c557a02efc2fc

Signatures

Execution

T1203 office_exploit_crash: Microsoft Office process crashes (failed exploitation of a vulnerability is possible)
T1064 office_macros: The document contains macroses (total: 3)

Defense Evasion

T1064 office_macros: The document contains macroses (total: 3)

Credential Access

T1555.003 cookie_files: Accesses cookie files
T1552 cookie_files: Accesses cookie files

Other

yara_rules: Static rules
modifies_certs: Attempts to generate or modify system certificates
office_summary: The document contains suspicious metadata
creates_in_programdata: Creates files in the ProgramData directory