cancel_sub_JPL82173418839376[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
cancel_sub_JPL82173418839376.xlsb
Size 264KB
Sample210518-7ftfv837rn
SHA256 7c2dae7cfc7b469c26b14d5cf7aed0e063ab8f854c7563d1e7fca448e6827a05
MD5 f1b51acf675dd0973ce3ec78fd9a1859
SHA1 83e8858f1d6a849151289a7c507a740d59e5da79
SHA512 9ce754214b348348fbdbdc933a61c9f01646f8021769c1c683fe1eb7d5af59e22950226233244cd7f304944164b46a55d708a668e01cf115085466357b766b43
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

cancel_sub_JPL82173418839376.xlsb

.xlsb .xlsm 264KB

cancel_sub_JPL82173418839376.xlsb

SHA256 7c2dae7cfc7b469c26b14d5cf7aed0e063ab8f854c7563d1e7fca448e6827a05
MD5 f1b51acf675dd0973ce3ec78fd9a1859
SHA1 83e8858f1d6a849151289a7c507a740d59e5da79
SHA512 9ce754214b348348fbdbdc933a61c9f01646f8021769c1c683fe1eb7d5af59e22950226233244cd7f304944164b46a55d708a668e01cf115085466357b766b43
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm