payment_752[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
payment_752.xls
Size 148KB
Sample200707-qdvryfszws
SHA256 5ed3ae3b34dc28e9f04dbc880a62a3595f3ac6f5c8d133917f15a98b17f121fc
MD5 8e27f25d7c56eb111e6e60b735562ce5
SHA1 ea8aa1d15c8c3a480ca553c9c514256d6b0a5c95
SHA512 a4335f5f25bbbc4005f638536936280eba51e21239dada04b76edc12ab40dc3ceacf60c56cd899280fd3eb79c46761f2cd209a5b8b46c1932c00661dc9ee3cca
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

payment_752.xls

.xls 148KB

payment_752.xls

SHA256 5ed3ae3b34dc28e9f04dbc880a62a3595f3ac6f5c8d133917f15a98b17f121fc
MD5 8e27f25d7c56eb111e6e60b735562ce5
SHA1 ea8aa1d15c8c3a480ca553c9c514256d6b0a5c95
SHA512 a4335f5f25bbbc4005f638536936280eba51e21239dada04b76edc12ab40dc3ceacf60c56cd899280fd3eb79c46761f2cd209a5b8b46c1932c00661dc9ee3cca
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro