Venue_BookingX31697[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Venue_BookingX31697.xlsb
Size 86KB
Sample211118-hcydwsbgdj
SHA256 d2ebc46ddc391d821fdec1b108fa63fbb02130c9965fd03059842af503822c9f
MD5 a24a6fe26eeca112cc1b39a1cb710d8b
SHA1 5216e55a1ba1238d8ec394cf65ba567509ab872b
SHA512 78325b87eb51faead40952b0b02ee0ab2624570e2434109c16f85c5d1b884054f6f8df53670ead882ec57bd446d3d10e529336724e093ec808f07e6c1722d55c
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Venue_BookingX31697.xlsb

.xlsb .xlsm 86KB

Venue_BookingX31697.xlsb

SHA256 d2ebc46ddc391d821fdec1b108fa63fbb02130c9965fd03059842af503822c9f
MD5 a24a6fe26eeca112cc1b39a1cb710d8b
SHA1 5216e55a1ba1238d8ec394cf65ba567509ab872b
SHA512 78325b87eb51faead40952b0b02ee0ab2624570e2434109c16f85c5d1b884054f6f8df53670ead882ec57bd446d3d10e529336724e093ec808f07e6c1722d55c
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm