cancel_sub_JPL12345678901234[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
cancel_sub_JPL12345678901234.xlsb
Size 241KB
Sample210518-y1e2nhs97e
SHA256 3cc4948d4d3cac89a74284ae4dc49d177b834f295e9f767a46dcd73726b7239d
MD5 b4a0b38ff2bd7619e42c0f1d1fb0171b
SHA1 c0e61bcc7139bc2342e5a9eb9a2bc056c475624d
SHA512 8830468a4f8ee1032abe7ede05fdc11fb592355c81447bf0d65b995a6d6a55fc399025084bb74bb7f4b52a14ee7a2ea79a2100480222c1da95e19b3b4a59cff5
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

cancel_sub_JPL12345678901234.xlsb

.xlsb .xlsm 241KB

cancel_sub_JPL12345678901234.xlsb

SHA256 3cc4948d4d3cac89a74284ae4dc49d177b834f295e9f767a46dcd73726b7239d
MD5 b4a0b38ff2bd7619e42c0f1d1fb0171b
SHA1 c0e61bcc7139bc2342e5a9eb9a2bc056c475624d
SHA512 8830468a4f8ee1032abe7ede05fdc11fb592355c81447bf0d65b995a6d6a55fc399025084bb74bb7f4b52a14ee7a2ea79a2100480222c1da95e19b3b4a59cff5
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm