SecuriteInfo[.]com[.]Heur[.]17052[.]16412 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.17052.16412
Size 298KB
Sample211201-2g4k9abfd9
SHA256 29e84b1c9c4a0bb841304879a3e5cceda1331e41bf97313032a12e17bfa4613a
MD5 c0bff0b73581e6c39ef7dbe6f12c1403
SHA1 b723107593ee808ff71245df8de3cbfddf95f02e
SHA512 213e01391a3b0bafe89e1a0179b5c256c8caf13d85fddeb4695971eb8d474ce40522237f3b6b31066049547ef0f82869efd6045c01a026e4bf6b0386749d4942
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Heur.17052.16412

.xls 298KB

SecuriteInfo.com.Heur.17052.16412

SHA256 29e84b1c9c4a0bb841304879a3e5cceda1331e41bf97313032a12e17bfa4613a
MD5 c0bff0b73581e6c39ef7dbe6f12c1403
SHA1 b723107593ee808ff71245df8de3cbfddf95f02e
SHA512 213e01391a3b0bafe89e1a0179b5c256c8caf13d85fddeb4695971eb8d474ce40522237f3b6b31066049547ef0f82869efd6045c01a026e4bf6b0386749d4942
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm