Termination-12106[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Termination-12106.xlsb
Size 64KB
Sample211121-t8weyshbb9
SHA256 0fbd1bf631d5e4ede2645fda44318d28668827fbe1ce45dc6f9f5e1be4c8bb58
MD5 0f4bb5d662f6bd2ef68e2641b2558d56
SHA1 982d8f8cbc5de6d3396967c530b29dc83e842366
SHA512 7d4cb5c839ba9eb33dc47fdb5696454a6b9ce07c0dbe51a8ee1fc5550acbc2c1ef10d0997552efe4a66f459815d9d067665c7aca012d483948eea13b4157f534
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Termination-12106.xlsb

.xlsb .xlsm 64KB

Termination-12106.xlsb

SHA256 0fbd1bf631d5e4ede2645fda44318d28668827fbe1ce45dc6f9f5e1be4c8bb58
MD5 0f4bb5d662f6bd2ef68e2641b2558d56
SHA1 982d8f8cbc5de6d3396967c530b29dc83e842366
SHA512 7d4cb5c839ba9eb33dc47fdb5696454a6b9ce07c0dbe51a8ee1fc5550acbc2c1ef10d0997552efe4a66f459815d9d067665c7aca012d483948eea13b4157f534
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm