QT request[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
QT request.xls
Size 41KB
Sample201208-qrmaprhdhe
SHA256 0f4238a14d0c6dbd53c84513df03d0d3be5f8452aa858e2273788690fe7c59dc
MD5 bd5b1a6cac0bb3be1d728867f6ace41a
SHA1 4a0dc8e67b9438f31ab2d575b1780262881bd8ff
SHA512 ee0a6f5b48c5b17cf45fa010b6b79c311c7458a48441cb64d39c1f05d72b71383febffdcdcd8fe24ffe4dad76f20fdb0466b9390ba9aa9e171610de7caa30eac
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

QT request.xls

.xls 41KB

QT request.xls

SHA256 0f4238a14d0c6dbd53c84513df03d0d3be5f8452aa858e2273788690fe7c59dc
MD5 bd5b1a6cac0bb3be1d728867f6ace41a
SHA1 4a0dc8e67b9438f31ab2d575b1780262881bd8ff
SHA512 ee0a6f5b48c5b17cf45fa010b6b79c311c7458a48441cb64d39c1f05d72b71383febffdcdcd8fe24ffe4dad76f20fdb0466b9390ba9aa9e171610de7caa30eac
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro