pay-3294[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
pay-3294.xls
Size 240KB
Sample200908-jf4ve21eys
SHA256 3ce3e9299312eabba28ead6d8277b16aeee1d38a98b4cb632ce2a1fbf9d0593e
MD5 b14159bffb1df11b68ed996345a65427
SHA1 944f53100d139cc131fbeb1435baa6140514a571
SHA512 63c7ec821079347ce2f3c32e17173c6afbc14085486dcb6c2cd6ff9b39dd9d689dc87df46282536618aec6bf461d4f209087e360e966368326674982fd99f507
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

pay-3294.xls

.xls 240KB

pay-3294.xls

SHA256 3ce3e9299312eabba28ead6d8277b16aeee1d38a98b4cb632ce2a1fbf9d0593e
MD5 b14159bffb1df11b68ed996345a65427
SHA1 944f53100d139cc131fbeb1435baa6140514a571
SHA512 63c7ec821079347ce2f3c32e17173c6afbc14085486dcb6c2cd6ff9b39dd9d689dc87df46282536618aec6bf461d4f209087e360e966368326674982fd99f507
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro