051245051373252633P[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
051245051373252633P.xls
Size 64KB
Sample211225-cfkpbaehbp
SHA256 dd221c0b7c00579705ae33a75edd3e7563f436da1aff4d6f3f019a0dfdccde2b
MD5 0c5192135381fdb4e799825c901be643
SHA1 1df5f2dccc17a815168e781ffcb49f7ad528a39b
SHA512 0792bf8c9352d90c04f27a7e6e165f25fc882ce203b6ec7b181df519b1ed00edf91d3de5c95aeaeb2ff213c8c860718324d15d2a7280ab7eae5fdc2e9711dc19
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

051245051373252633P.xls

.xls 64KB

051245051373252633P.xls

SHA256 dd221c0b7c00579705ae33a75edd3e7563f436da1aff4d6f3f019a0dfdccde2b
MD5 0c5192135381fdb4e799825c901be643
SHA1 1df5f2dccc17a815168e781ffcb49f7ad528a39b
SHA512 0792bf8c9352d90c04f27a7e6e165f25fc882ce203b6ec7b181df519b1ed00edf91d3de5c95aeaeb2ff213c8c860718324d15d2a7280ab7eae5fdc2e9711dc19
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm