BankSwiftCopyUSD95000[.]pps | Triage

Sharing

General

Target

BankSwiftCopyUSD95000.pps
Size

99KB
MD5

7f0b415d0b7a76530b2f510a910811e5
SHA1

480594ad26c91dd9d719c80334285375540dc83e
SHA256

8d3e1d1a1775191a33980069f500e37f22bdcd0a1ad3544ab4a9d0a651fbd019
SHA512

d9b3320b51f390a6f75e7e3102044557e6476103c94ec4451819b78b4503f8018fee7ce8f70657473b310b14b752935fac2b7e5caaeb318e09a9af317701d8f4

Score

8^/10

macro

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

BankSwiftCopyUSD95000.pps
.pps windows office2003

Module1