d878a7c8fa46c52020a07de7726a8a740d245dcf0a58355b88a054059f933ba3 (SHA256)
Mert-Obfuscated25.xlsm
Excel Document
Created at 2019-02-17 13:34:00
YARA Information
| Applied On | Sample Files, PCAP File, Created Files, Modified Files, Process Dumps |
| Number of YARA matches | 3 |
| Ruleset Name | Rule Name | Rule Description | File Type | Filename | Classification | Severity | Actions |
|---|---|---|---|---|---|---|---|
| Generic | VBA_Download_Commands | VBA macro may attempt to download external content; possible dropper | Sample File | C:\Users\aETAdzjz\Desktop\Mert-Obfuscated25.xlsm | - |
3/5
|
|
| Generic | VBA_Execution_Commands | VBA macro may execute files or system commands | Sample File | C:\Users\aETAdzjz\Desktop\Mert-Obfuscated25.xlsm | - |
3/5
|
|
| Generic | VBA_Obfuscation_ObjectName | VBA initializes COM object from long variable name; possible obfuscation | Sample File | C:\Users\aETAdzjz\Desktop\Mert-Obfuscated25.xlsm | - |
2/5
|
|
