Termination letter-30471[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Termination letter-30471.xlsb
Size 63KB
Sample211121-vkn7eahbe2
SHA256 defb45f39a49d579947f0f7a8c3f4eef1bdd4c77947a4e7e48ab66ccf279e9bd
MD5 32cf28db14032003866f66e7d7af29a8
SHA1 12083f3f5c5e28b5949b74cd09fcb6ed269b0772
SHA512 3fea048ee7578c9b57a7d2511e5a9a59a71bf8e6ffda8242f5cdc3c39b9a068eec0b415be10aaf7d95a7658bbe51be75ccc1e25c69c8a7e08787d0bb29b631b5
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Termination letter-30471.xlsb

.xlsb .xlsm 63KB

Termination letter-30471.xlsb

SHA256 defb45f39a49d579947f0f7a8c3f4eef1bdd4c77947a4e7e48ab66ccf279e9bd
MD5 32cf28db14032003866f66e7d7af29a8
SHA1 12083f3f5c5e28b5949b74cd09fcb6ed269b0772
SHA512 3fea048ee7578c9b57a7d2511e5a9a59a71bf8e6ffda8242f5cdc3c39b9a068eec0b415be10aaf7d95a7658bbe51be75ccc1e25c69c8a7e08787d0bb29b631b5
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm