document-1699807874[.]xls | Triage™

Resubmissions

17/12/2020, 18:23

201217-a919dkygg210

03/12/2020, 14:36

201203-xg2dt64s3j10

Sharing

Copy URL Twitter E-mail

General

Target
document-1699807874.xls
Size 111KB
Sample201217-a919dkygg2
SHA256 52e0b5d39e9a97736b03f2b0ac315bb874da3632574cdd252fd8b9138cc1b299
MD5 dea2166519409b96205775cc95abab6e
SHA1 a70da2919e3f81d3fd397435649097e296605536
SHA512 28f317f53ace16c4c6ffc701fad325eebc0dc54c85477cfd9b27d1cbd809b1df128fa235b72c7db7927618adca29440a54c194f97cdb8f38bc98220200f24b1c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

document-1699807874.xls

.xls 111KB

document-1699807874.xls

SHA256 52e0b5d39e9a97736b03f2b0ac315bb874da3632574cdd252fd8b9138cc1b299
MD5 dea2166519409b96205775cc95abab6e
SHA1 a70da2919e3f81d3fd397435649097e296605536
SHA512 28f317f53ace16c4c6ffc701fad325eebc0dc54c85477cfd9b27d1cbd809b1df128fa235b72c7db7927618adca29440a54c194f97cdb8f38bc98220200f24b1c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro