cancel_sub_JPL12345678901234[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
cancel_sub_JPL12345678901234.xlsb
Size 260KB
Sample210519-hce37drhmx
SHA256 49e315aa89bf10972518c3069a767c869bbf7027c298afd11ab21040285b3f9e
MD5 80fdec003c86c583473a9fbbabf40d2f
SHA1 991940040a50a0be56572e4a9ab73d6d4dbab050
SHA512 022475db6593d15bdcc1411f7c3b88a8822311f621506401ad3ba33ddc2a52ae6e97e4357e3742bf59ef287c033f5363cb5d2021be793d5552a3a8b73b85cfa5
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

cancel_sub_JPL12345678901234.xlsb

.xlsb .xlsm 260KB

cancel_sub_JPL12345678901234.xlsb

SHA256 49e315aa89bf10972518c3069a767c869bbf7027c298afd11ab21040285b3f9e
MD5 80fdec003c86c583473a9fbbabf40d2f
SHA1 991940040a50a0be56572e4a9ab73d6d4dbab050
SHA512 022475db6593d15bdcc1411f7c3b88a8822311f621506401ad3ba33ddc2a52ae6e97e4357e3742bf59ef287c033f5363cb5d2021be793d5552a3a8b73b85cfa5
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm