invoice8984[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
invoice8984.xls
Size 45KB
Sample201106-e91qfa5bh2
SHA256 d20d8877e1d1e62df37b77b9407360cd71db4b5fab218b7bef4d43c47371bbb6
MD5 391aa700c2d3f6a4f8cb2627abaf351f
SHA1 c0dc593fa38b644cd08a53b2058a0499009fd23f
SHA512 25f05e2a42dd9a5b2d84c6c5e3ed90a0f7c1d49256d58d1e3e876db909461dc3081c38331af3c72a6e92ff5c76b066e7e80e70eeeef6cf6a50655c593dbd92d4
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

invoice8984.xls

.xls 45KB

invoice8984.xls

SHA256 d20d8877e1d1e62df37b77b9407360cd71db4b5fab218b7bef4d43c47371bbb6
MD5 391aa700c2d3f6a4f8cb2627abaf351f
SHA1 c0dc593fa38b644cd08a53b2058a0499009fd23f
SHA512 25f05e2a42dd9a5b2d84c6c5e3ed90a0f7c1d49256d58d1e3e876db909461dc3081c38331af3c72a6e92ff5c76b066e7e80e70eeeef6cf6a50655c593dbd92d4
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro