hunting license 13373596[.]xlsb | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
hunting license 13373596.xlsb
Size 98KB
Sample211126-pc6htscbgm
SHA256 4f974e08c9c8eb7ff04d8aa4aecf7e9d60595a8c1cbdfac6a68eaf1283ec7a9b
MD5 e6a5ad688b55b50758e1c0610ecf5487
SHA1 abf6078a9f4295e3ba15f66e9a8dc561b39c9fcb
SHA512 8f48cdaf0b40ee10d4e63e8b2bbf56987cc8505a49297f4f3d95010509677a450396a594cdd65d1660e14d49015d57c77c6aae126606d1476912717e33810e1f
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

hunting license 13373596.xlsb

.xlsb .xlsm 98KB

hunting license 13373596.xlsb

SHA256 4f974e08c9c8eb7ff04d8aa4aecf7e9d60595a8c1cbdfac6a68eaf1283ec7a9b
MD5 e6a5ad688b55b50758e1c0610ecf5487
SHA1 abf6078a9f4295e3ba15f66e9a8dc561b39c9fcb
SHA512 8f48cdaf0b40ee10d4e63e8b2bbf56987cc8505a49297f4f3d95010509677a450396a594cdd65d1660e14d49015d57c77c6aae126606d1476912717e33810e1f
MD5 SHA1 SHA512

office2007

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm