sale_voucher_83599[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
sale_voucher_83599.xlsb
Size 68KB
Sample211124-vtpjjagdh2
SHA256 19a8a28e3626a6d58fdc499b95c35cb9d7ec2ae4cdcefd3460d4b40b868d369b
MD5 af37986b897322e6888efa0a4428c883
SHA1 6f66fc6d8d4913b11e4982a50658eca42b42f98b
SHA512 1873572fcc73dc02523ef774ae2b9945c8c1a193b5e2d3fafcb94f228c469279de89a15a62a02c8b2b51130dd30a57db2b21cd33e271b5275395eea1d4f00f3c
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

sale_voucher_83599.xlsb

.xlsb .xlsm 68KB

sale_voucher_83599.xlsb

SHA256 19a8a28e3626a6d58fdc499b95c35cb9d7ec2ae4cdcefd3460d4b40b868d369b
MD5 af37986b897322e6888efa0a4428c883
SHA1 6f66fc6d8d4913b11e4982a50658eca42b42f98b
SHA512 1873572fcc73dc02523ef774ae2b9945c8c1a193b5e2d3fafcb94f228c469279de89a15a62a02c8b2b51130dd30a57db2b21cd33e271b5275395eea1d4f00f3c
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm