offer680834[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
offer680834.xlsb
Size 77KB
Sample211124-slrb2sgbh3
SHA256 5a2e283ef238172eaffebf3bb9691bc846e072b7d6e831ec9dc9ed72aaff4061
MD5 bb816b6c1d2e442eda4da5a998b95295
SHA1 58c3488042a58fcb6e2677fe38e443baef46904b
SHA512 ce3aeb6e7b8a05c0ad86a2ca7268fed3f226c4ca20a6d118d7f9eecd5a552c804ef28ef7a7df897359abf4db4c21088ed4b496e500943ac01069415904312414
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

offer680834.xlsb

.xlsb .xlsm 77KB

offer680834.xlsb

SHA256 5a2e283ef238172eaffebf3bb9691bc846e072b7d6e831ec9dc9ed72aaff4061
MD5 bb816b6c1d2e442eda4da5a998b95295
SHA1 58c3488042a58fcb6e2677fe38e443baef46904b
SHA512 ce3aeb6e7b8a05c0ad86a2ca7268fed3f226c4ca20a6d118d7f9eecd5a552c804ef28ef7a7df897359abf4db4c21088ed4b496e500943ac01069415904312414
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm