INV+PL+BL-489492020[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
INV+PL+BL-489492020.xls
Size 192KB
Sample200713-pxzz4682tx
SHA256 4eaaf544257b0465bb8acff69b987abf00bd19a32fbc45bc0e57b8c66244553a
MD5 b379714e8daaf2673032f31b2a6abb07
SHA1 b4f97dceff91b030a76dd19e45b91826fd382e86
SHA512 11e3989a2641872fb9a08f9d6d6af330eab9cc4c28a84b6801cfe91c56bc5c7fc224265e2afc6661a96cd8b71bd7298e53ae6b3440b4048600c15d131e6db6a4
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

INV+PL+BL-489492020.xls

.xls 192KB

INV+PL+BL-489492020.xls

SHA256 4eaaf544257b0465bb8acff69b987abf00bd19a32fbc45bc0e57b8c66244553a
MD5 b379714e8daaf2673032f31b2a6abb07
SHA1 b4f97dceff91b030a76dd19e45b91826fd382e86
SHA512 11e3989a2641872fb9a08f9d6d6af330eab9cc4c28a84b6801cfe91c56bc5c7fc224265e2afc6661a96cd8b71bd7298e53ae6b3440b4048600c15d131e6db6a4
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro