Termination[.]15206[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Termination.15206.xlsb
Size 93KB
Sample211121-t9d73ahbc2
SHA256 ec78734f010ae101fa12c9ead87f81833fffbb291ddd858da8eaa240d62b8f59
MD5 9a33884f58fec9cd6ffb0d82652d8874
SHA1 21a209b1eef5af8ac31ba784f10aca0c37e7760b
SHA512 5f985e7e86d1985f1284ce60b456dab283237b3ab48ee3ee4a0953f049d0620f0a61f91d6619f94e97e7bf4c23abb74842098616a1b74122b76ea6d4ec399687
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Termination.15206.xlsb

.xlsb .xlsm 93KB

Termination.15206.xlsb

SHA256 ec78734f010ae101fa12c9ead87f81833fffbb291ddd858da8eaa240d62b8f59
MD5 9a33884f58fec9cd6ffb0d82652d8874
SHA1 21a209b1eef5af8ac31ba784f10aca0c37e7760b
SHA512 5f985e7e86d1985f1284ce60b456dab283237b3ab48ee3ee4a0953f049d0620f0a61f91d6619f94e97e7bf4c23abb74842098616a1b74122b76ea6d4ec399687
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm