Managed XDR

7119abb986d97e84d1514f...39b11f17a5c3c-1125.xls — malware analysis report

File info

Filename
7119abb986d97e84d1514f587c3c3204cf079f0370728ae64f539b11f17a5c3c-1125.xls
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, Code page: 936, Last Saved By: Administrator, Create Time/Date: Wed Sep 13 11:21:00 2006, Last Saved Time/Date: Mon Nov 25 02:28:55 2024
File size
23 KB
First seen
Last seen

Environment

winxp/x86 en

Hashes

SHA1
a51d047a85fed80e28f56b326092674fddf5a77d
SHA256
847157509b871899f88b35b573277052225e98f602ed1df023cc809914bfae86
MD5
1485e64a7dba9f5f81f84ae05d7d33f7

Signatures

Execution

T1203 office_exploit_crash: Microsoft Office process crashes (failed exploitation of a vulnerability is possible)
T1064 office_macros: The document contains macroses (total: 3)

Defense Evasion

T1064 office_macros: The document contains macroses (total: 3)

Credential Access

T1555.003 cookie_files: Accesses cookie files
T1552 cookie_files: Accesses cookie files

Other

yara_rules: Static rules
modifies_certs: Attempts to generate or modify system certificates
office_summary: The document contains suspicious metadata
creates_in_programdata: Creates files in the ProgramData directory