H3726252040602729[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
H3726252040602729.xls
Size 65KB
Sample211224-ftqdhadbdp
SHA256 99a673a62ecad396147d85ad82e9a2ff4debd5f8d8865b6574adddd1046499bc
MD5 1daa941b1e4cdc7ad10917bf8cc633a8
SHA1 fbb6ac113c9fa82d3b8e1a2686ff94937415ab95
SHA512 b71217047f2c3672de9febb43ac5ee02b84deed2f6f5bcd24c81192f0035a41a9c51a69d65cb88160fdd9ee73a977a59e23423ec2e75223e75cfdd3c069a9dce
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

H3726252040602729.xls

.xls 65KB

H3726252040602729.xls

SHA256 99a673a62ecad396147d85ad82e9a2ff4debd5f8d8865b6574adddd1046499bc
MD5 1daa941b1e4cdc7ad10917bf8cc633a8
SHA1 fbb6ac113c9fa82d3b8e1a2686ff94937415ab95
SHA512 b71217047f2c3672de9febb43ac5ee02b84deed2f6f5bcd24c81192f0035a41a9c51a69d65cb88160fdd9ee73a977a59e23423ec2e75223e75cfdd3c069a9dce
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm