case[.]8920[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
case.8920.xls
Size 36KB
Sample201128-qwalk34dme
SHA256 728a8824a63aa0bcd66180d17a4b65fe6c0ef0bc6deeacf014ebd00700e8c5d4
MD5 9f819b2bfe33781d049504b0f6aa1c61
SHA1 c2a21ea02b8b8fbe98ea7a3a6cdc90348b9195d7
SHA512 a07b2940ac5d1928e73e115d787447c02f1f76477520af5237df252339cbfe51e16b358076908b3182dd860cb7c001c4d0d283957014e55ce362f3477ea01012
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

case.8920.xls

.xls 36KB

case.8920.xls

SHA256 728a8824a63aa0bcd66180d17a4b65fe6c0ef0bc6deeacf014ebd00700e8c5d4
MD5 9f819b2bfe33781d049504b0f6aa1c61
SHA1 c2a21ea02b8b8fbe98ea7a3a6cdc90348b9195d7
SHA512 a07b2940ac5d1928e73e115d787447c02f1f76477520af5237df252339cbfe51e16b358076908b3182dd860cb7c001c4d0d283957014e55ce362f3477ea01012
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro