Venue_Booking_29695[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Venue_Booking_29695.xlsb
Size 84KB
Sample211122-2dnqmaghgr
SHA256 3fe5e5d465cdf3347f3e6c242dde41cffa4a53dc82999bfe912bf07ded5b0bcd
MD5 d895eb8541b63b6d80b11f66f053dc35
SHA1 48ca23cd4f505917f3645a1147171e826658fc24
SHA512 5f0b1d1aca43f43194ee95d630ecef57c89029d16a7bdbb0e3d500bcb2402d591e6ffdd73db03b7af48d983a646b088548342c3e7a2a19dc91a6ed0fb3621778
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Venue_Booking_29695.xlsb

.xlsb .xlsm 84KB

Venue_Booking_29695.xlsb

SHA256 3fe5e5d465cdf3347f3e6c242dde41cffa4a53dc82999bfe912bf07ded5b0bcd
MD5 d895eb8541b63b6d80b11f66f053dc35
SHA1 48ca23cd4f505917f3645a1147171e826658fc24
SHA512 5f0b1d1aca43f43194ee95d630ecef57c89029d16a7bdbb0e3d500bcb2402d591e6ffdd73db03b7af48d983a646b088548342c3e7a2a19dc91a6ed0fb3621778
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm