SecuriteInfo[.]com[.]Heur[.]11712[.]16431 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.11712.16431
Size 165KB
Sample210218-a9llk8slj2
SHA256 2b08e7b15acdf76390aa499573b76edbdc69617be61a2fbc0536eb24eada0c79
MD5 8ba19b8ef6dbf8caa528664f1fff8cfd
SHA1 59cd545ac4a3681e4c1f640a85827d1a57738112
SHA512 9ff0258f8b24aaa275a9a5c6db2c5306752a6105e7256e263268daf44d6931a47f9bb108be8e1f6bddb84d74cd83064729b86f0d9eb371e4b2061d71ce88d492
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Heur.11712.16431

.xls 165KB

SecuriteInfo.com.Heur.11712.16431

SHA256 2b08e7b15acdf76390aa499573b76edbdc69617be61a2fbc0536eb24eada0c79
MD5 8ba19b8ef6dbf8caa528664f1fff8cfd
SHA1 59cd545ac4a3681e4c1f640a85827d1a57738112
SHA512 9ff0258f8b24aaa275a9a5c6db2c5306752a6105e7256e263268daf44d6931a47f9bb108be8e1f6bddb84d74cd83064729b86f0d9eb371e4b2061d71ce88d492
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm