trickbot[.]xls[.]zip | Triage

Sharing

General

Target

trickbot.xls.zip
Size

24KB
MD5

93036788d99ca7ae57a5a38ba5f4624f
SHA1

b80f13adddf9b1d20e72df4a9712d15e56e54e67
SHA256

0f762e82649c034434fe38dfd45835ad4e560b377a9a7c23e30578fbaf1b1505
SHA512

77afc459b902ec57a055db3d33db012f49fc4e54561ffa77720a42d489a492052f92d2656eea9777659e404eea6e3258cb306b92e107c9f9b959d4045c90c017

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
static1/unpack001/trickbot.xls	office_xlm_macros

Files

trickbot.xls.zip
.zip

Password: infected
trickbot.xls
.xls windows office2003