Booking-6880[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Booking-6880.xlsb
Size 75KB
Sample211124-jgeb9afda3
SHA256 2546359770f46f8cc28b614ecf18387bb5c07c635e4ddd9211740a82eb01ce99
MD5 52a9f4ae1a9a426c20c9cbdd3beb2f8b
SHA1 7d8f42151b34d908107c92ab993216fbb91c2645
SHA512 75588f1506338dd97739a2aed3173a2f7318c72282c8cf3283536079d677a5d752eb97134261775c3d036d6eacc2e1a2e30563563962fcc1a7343b5c94e0a013
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Booking-6880.xlsb

.xlsb .xlsm 75KB

Booking-6880.xlsb

SHA256 2546359770f46f8cc28b614ecf18387bb5c07c635e4ddd9211740a82eb01ce99
MD5 52a9f4ae1a9a426c20c9cbdd3beb2f8b
SHA1 7d8f42151b34d908107c92ab993216fbb91c2645
SHA512 75588f1506338dd97739a2aed3173a2f7318c72282c8cf3283536079d677a5d752eb97134261775c3d036d6eacc2e1a2e30563563962fcc1a7343b5c94e0a013
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm