Booking Confirm[.]27441[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Booking Confirm.27441.xlsb
Size 67KB
Sample211122-rnfgwsafg8
SHA256 1a5f304d93bf98c769edff179a460113a714a805f08a8ceacbe413e5b97145fe
MD5 348d2008084459d694572131bbe3a529
SHA1 e3a953aaba214afb811be97603759ccfc524a383
SHA512 7507006e22e7e6148440f2381994bb99785a387879cdc49125512783cd5ce1cec98034edc5a16436ae44643b801f56b92676cef251a60c965ac3d4fc49fd0c4e
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Booking Confirm.27441.xlsb

.xlsb .xlsm 67KB

Booking Confirm.27441.xlsb

SHA256 1a5f304d93bf98c769edff179a460113a714a805f08a8ceacbe413e5b97145fe
MD5 348d2008084459d694572131bbe3a529
SHA1 e3a953aaba214afb811be97603759ccfc524a383
SHA512 7507006e22e7e6148440f2381994bb99785a387879cdc49125512783cd5ce1cec98034edc5a16436ae44643b801f56b92676cef251a60c965ac3d4fc49fd0c4e
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm