cancel_sub_JPL12345678901234[.]xlsb | Triage

Sharing

General

Target

cancel_sub_JPL12345678901234.xlsb
Size

260KB
MD5

80fdec003c86c583473a9fbbabf40d2f
SHA1

991940040a50a0be56572e4a9ab73d6d4dbab050
SHA256

49e315aa89bf10972518c3069a767c869bbf7027c298afd11ab21040285b3f9e
SHA512

022475db6593d15bdcc1411f7c3b88a8822311f621506401ad3ba33ddc2a52ae6e97e4357e3742bf59ef287c033f5363cb5d2021be793d5552a3a8b73b85cfa5

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros

Files

cancel_sub_JPL12345678901234.xlsb
.xlsb .xlsm office2007