Payment_Receipt 6009[.]xls | Triage

Sharing

Reason

office: invalid record header length

General

Target

Payment_Receipt 6009.xls
Size

82KB
MD5

0f75ef8b3754f6a827c45d7fdccb3506
SHA1

9ad6be6020f89d46458b548a24f3790f47a670f0
SHA256

15a5b5aaad7f84dcc7982d4748c86ff9535859fca9c384d6aa88812fe2bf0d8c
SHA512

d925e7a9d2063cf0025a0aed7f499637272a0a4fc6fdabc1b534beda5abd85d307a268c60dbd1d611f7eff35178c19dbf4c8f4f604f088f6bef4f296452ef7bd

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro xlm

Processes:

resource yara_rule

sample office_xlm_macros

Files

Payment_Receipt 6009.xls
.xls windows office2003