Order-3899[.]xls | Triage™

Resubmissions

11/12/2020, 14:10

201211-syk341hhhe10

11/12/2020, 14:04

201211-7b5pp39k3x8

Sharing

Copy URL Twitter E-mail

General

Target
Order-3899.xls
Size 32KB
Sample201211-7b5pp39k3x
SHA256 d6063921e36b12414d769eda7cf5715541d149e54168128ceeb800a05f9f2b3d
MD5 5c78e4a9ca8178621432bec41dfe82ce
SHA1 bc2d2d2c559395f29835876a196b96b7f5763561
SHA512 573140835de86f47308986757608be778d8cab4e10ca2d1b0c6d1e1837eff30acce84c204b9f65ed462506bb101f295709ec57a588a515b2f8b9db76e57f8070
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Order-3899.xls

.xls 32KB

Order-3899.xls

SHA256 d6063921e36b12414d769eda7cf5715541d149e54168128ceeb800a05f9f2b3d
MD5 5c78e4a9ca8178621432bec41dfe82ce
SHA1 bc2d2d2c559395f29835876a196b96b7f5763561
SHA512 573140835de86f47308986757608be778d8cab4e10ca2d1b0c6d1e1837eff30acce84c204b9f65ed462506bb101f295709ec57a588a515b2f8b9db76e57f8070
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro