gloves design[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
gloves design.xls
Size 192KB
Sample200713-x227w2g7pn
SHA256 c37a1523c641b7d3570772d73004397efd07e5df4ee1e5ca2145664fc38f6ae4
MD5 5f1646715f9ea3a6bb2e472a9ffc05ab
SHA1 fe3ade8c3b3e43fad68bbdc83c3a9d91a020dbc4
SHA512 fddafc1280db573cc773a62f981eee6ccb6bf3184f7894b8c5d38bfb61d0266dcf8aeac6df5e48343f442a2ae4b3c48fc9a39350c752020b73c3271551e7e000
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

gloves design.xls

.xls 192KB

gloves design.xls

SHA256 c37a1523c641b7d3570772d73004397efd07e5df4ee1e5ca2145664fc38f6ae4
MD5 5f1646715f9ea3a6bb2e472a9ffc05ab
SHA1 fe3ade8c3b3e43fad68bbdc83c3a9d91a020dbc4
SHA512 fddafc1280db573cc773a62f981eee6ccb6bf3184f7894b8c5d38bfb61d0266dcf8aeac6df5e48343f442a2ae4b3c48fc9a39350c752020b73c3271551e7e000
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro