X150338401580719[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
X150338401580719.xls
Size 64KB
Sample211224-ftqdhadbdr
SHA256 3fcc643de96cc8f42515929e84f68cfb36f28537b37a1fa152bab2898d161a0f
MD5 356c29c9fc1b736c8230fec270d532d2
SHA1 c6bc9aab63547fd4467acd93083a5186aec0f237
SHA512 4a4c22a4b5cace0a8701fb0a3f3b6d91781a7e9dab29f42ffba09551e1b1a5a8c6ca08f45a8029e4bd5ae47ecd4c542ea248829954864d9596066696b3754b4b
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

X150338401580719.xls

.xls 64KB

X150338401580719.xls

SHA256 3fcc643de96cc8f42515929e84f68cfb36f28537b37a1fa152bab2898d161a0f
MD5 356c29c9fc1b736c8230fec270d532d2
SHA1 c6bc9aab63547fd4467acd93083a5186aec0f237
SHA512 4a4c22a4b5cace0a8701fb0a3f3b6d91781a7e9dab29f42ffba09551e1b1a5a8c6ca08f45a8029e4bd5ae47ecd4c542ea248829954864d9596066696b3754b4b
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm