2b2b[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2b2b.xls
Size 123KB
Sample200708-zzvlvga1tx
SHA256 85efbeb17d8e366e0f67d21fecc3fc754ecb997ee2033682f47cb0da38439c02
MD5 a8af9448db3633caaa99b48015414002
SHA1 2a9a76c3d9b61ca8c302244bb1853269b1f6c52c
SHA512 07079061907e1269bfd008ea110a37f6217a8d2bfa8e7bfd8763a71e2024ba8bb131f6158fcac573fbb9bcd05e5dd7e373394868d8064f5445960e1afce3a481
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

2b2b.xls

.xls 123KB

2b2b.xls

SHA256 85efbeb17d8e366e0f67d21fecc3fc754ecb997ee2033682f47cb0da38439c02
MD5 a8af9448db3633caaa99b48015414002
SHA1 2a9a76c3d9b61ca8c302244bb1853269b1f6c52c
SHA512 07079061907e1269bfd008ea110a37f6217a8d2bfa8e7bfd8763a71e2024ba8bb131f6158fcac573fbb9bcd05e5dd7e373394868d8064f5445960e1afce3a481
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro