Document931215825[.]xls | Triage™

Resubmissions

18/12/2020, 16:31

201218-rf4f27wdbs8

14/12/2020, 11:33

201214-1gy4fl2smn8

12/12/2020, 16:18

201212-45avfhl4rx10

11/12/2020, 11:08

201211-d57rtvtlna10

11/12/2020, 10:19

201211-zh128fnl2n10

Sharing

Copy URL Twitter E-mail

Reason

office: non-rc4 encrypted document not supported

General

Target
Document931215825.xls
Size 53KB
Sample201211-zh128fnl2n
SHA256 829419a788104ec45e82487738be2779a83cac1b65bfc9343e351e75cfa49f5e
MD5 ef687c6dd0731d96d622ac024974a35b
SHA1 907be2046fd958898fa14be35f567cbb30e5e8bb
SHA512 64c3ff8bcab43efaa971816463a620f02f760c84c60daa96d1937046b746156ab8f8461d6c68051e198e156b24133831fc663779c4f389f92ef146b6eb6a3fc5
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Document931215825.xls

.xls 53KB

Document931215825.xls

SHA256 829419a788104ec45e82487738be2779a83cac1b65bfc9343e351e75cfa49f5e
MD5 ef687c6dd0731d96d622ac024974a35b
SHA1 907be2046fd958898fa14be35f567cbb30e5e8bb
SHA512 64c3ff8bcab43efaa971816463a620f02f760c84c60daa96d1937046b746156ab8f8461d6c68051e198e156b24133831fc663779c4f389f92ef146b6eb6a3fc5
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro