PI[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PI.xls
Size 78KB
Sample200707-wl83p48x9e
SHA256 9669eef629e4ab04993fe21785b7d9f17b4a754666298f9179e6bdfb262ae460
MD5 db3cbb6f1e32f89dd92e9cfc7ecebb28
SHA1 b28f2a7722f39ff823129b066f758c9b18c44b0a
SHA512 506cc3f529d4609d7b4b225afc8cec60c1e682bedb19043cbfb5676423597f84e7e7c33aef74a0e02742713d98098f7884a5deec412c2ef67235294733fba284
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

PI.xls

.xls 78KB

PI.xls

SHA256 9669eef629e4ab04993fe21785b7d9f17b4a754666298f9179e6bdfb262ae460
MD5 db3cbb6f1e32f89dd92e9cfc7ecebb28
SHA1 b28f2a7722f39ff823129b066f758c9b18c44b0a
SHA512 506cc3f529d4609d7b4b225afc8cec60c1e682bedb19043cbfb5676423597f84e7e7c33aef74a0e02742713d98098f7884a5deec412c2ef67235294733fba284
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro