W2_tax[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
W2_tax.xls
Size 78KB
Sample200709-51sge4tcm2
SHA256 a29c5c74a10ecc2aa343ec8da39c2549ceaad1f6d1cd7a2b1ddaf8f15d913c2c
MD5 1fd2f585ce9317cb4ef6e4c233ada13d
SHA1 3357e3ea80149ca4e70d3d2ff1a362c8c7bd2c9d
SHA512 0e90c2855aa6b815c5caf1c6f83c2bf1dd7d590a92744f90627383c6376a59ea38b5dd1d093c74e40a9a93d662c437de10201c9b85e671ba3a6145df2482184c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

W2_tax.xls

.xls 78KB

W2_tax.xls

SHA256 a29c5c74a10ecc2aa343ec8da39c2549ceaad1f6d1cd7a2b1ddaf8f15d913c2c
MD5 1fd2f585ce9317cb4ef6e4c233ada13d
SHA1 3357e3ea80149ca4e70d3d2ff1a362c8c7bd2c9d
SHA512 0e90c2855aa6b815c5caf1c6f83c2bf1dd7d590a92744f90627383c6376a59ea38b5dd1d093c74e40a9a93d662c437de10201c9b85e671ba3a6145df2482184c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro