mal[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
mal.xls
Size 273KB
Sample210316-ratfxrnzza
SHA256 f4fc313fbfeafb3eb383097ff2c9f791cfb0f687a8488b8bc0923e9d693cdc4c
MD5 c96139bf98423aaabcdf618081663a40
SHA1 f14629ec76888b6a4eb54e5d849a6f34058d7fea
SHA512 50c67303f2a3278c0b656b55d8ea68e9d213f8b6549882d6d252e6a2e36bff87b11c4181eb7ad4ee0a32a27120e0aa023c57bb48af77f56694765d905c20bc51
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

mal.xls

.xls 273KB

mal.xls

SHA256 f4fc313fbfeafb3eb383097ff2c9f791cfb0f687a8488b8bc0923e9d693cdc4c
MD5 c96139bf98423aaabcdf618081663a40
SHA1 f14629ec76888b6a4eb54e5d849a6f34058d7fea
SHA512 50c67303f2a3278c0b656b55d8ea68e9d213f8b6549882d6d252e6a2e36bff87b11c4181eb7ad4ee0a32a27120e0aa023c57bb48af77f56694765d905c20bc51
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm