Payment[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Payment.xls
Size 165KB
Sample201109-gpglchy52a
SHA256 5e7621b7f875f9e6c730454d916a2bc2acb7d8b1fbc1dbe7cdb1917d42f1590b
MD5 401d0e4d40efa9820640d116097d4d2e
SHA1 d493474c25387f2f3373ee95406ce859414ecf55
SHA512 f6c5c9c9216b5ed50777c76b126244f74bf69f299e9273c24bc1eba9324af05c78810671dea83a14f7d3339c524e8bd85b604af3586df7a035fc5816fe64435b
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Payment.xls

.xls 165KB

Payment.xls

SHA256 5e7621b7f875f9e6c730454d916a2bc2acb7d8b1fbc1dbe7cdb1917d42f1590b
MD5 401d0e4d40efa9820640d116097d4d2e
SHA1 d493474c25387f2f3373ee95406ce859414ecf55
SHA512 f6c5c9c9216b5ed50777c76b126244f74bf69f299e9273c24bc1eba9324af05c78810671dea83a14f7d3339c524e8bd85b604af3586df7a035fc5816fe64435b
MD5 SHA1 SHA512

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro
Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Module1

YhfngJkbook

Sheet1

Sheet2

Sheet3