payment67942[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
payment67942.xlsb
Size 78KB
Sample211126-p33jvsfff8
SHA256 f99d44c28ed1a1d98c19541455a621e96dbf5fd52395774e7e8d53e2bdd5ed9d
MD5 81574ec946727e2b1f6a27344fb331ae
SHA1 291a97ebcbeb95bdf975e2e8c6de9a5f4ce99d51
SHA512 e19677a02e4dea586ed48e2a1d3fcf77e0631ca1c985f47d4951811f5217d11829a50876fa113f7793ffbe28c6d2277250dda6f05d8255a66357d32c9b1c4f03
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

payment67942.xlsb

.xlsb .xlsm 78KB

payment67942.xlsb

SHA256 f99d44c28ed1a1d98c19541455a621e96dbf5fd52395774e7e8d53e2bdd5ed9d
MD5 81574ec946727e2b1f6a27344fb331ae
SHA1 291a97ebcbeb95bdf975e2e8c6de9a5f4ce99d51
SHA512 e19677a02e4dea586ed48e2a1d3fcf77e0631ca1c985f47d4951811f5217d11829a50876fa113f7793ffbe28c6d2277250dda6f05d8255a66357d32c9b1c4f03
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm