79ac0e95634248aedd3c8065c4b38256 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
79ac0e95634248aedd3c8065c4b38256
Size 118KB
Sample220111-3qkeeaaag2
SHA256 bb32c9472ef2faeae273e266c7fd2dd749d5b200affe3e0e3d3cbacd4cf6e904
MD5 79ac0e95634248aedd3c8065c4b38256
SHA1 55920103351780c7d04deb69199d88897de44874
SHA512 c6accfeaf58ff7bb762e80ad5a0c4d251f74fd1342b6dda68c08ca40bdb1c69c0272fa8cbd79632723b170296b090680c04ebfa4e1f3e9ea83444c6d46de43c9
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

79ac0e95634248aedd3c8065c4b38256

.xls 118KB

79ac0e95634248aedd3c8065c4b38256

SHA256 bb32c9472ef2faeae273e266c7fd2dd749d5b200affe3e0e3d3cbacd4cf6e904
MD5 79ac0e95634248aedd3c8065c4b38256
SHA1 55920103351780c7d04deb69199d88897de44874
SHA512 c6accfeaf58ff7bb762e80ad5a0c4d251f74fd1342b6dda68c08ca40bdb1c69c0272fa8cbd79632723b170296b090680c04ebfa4e1f3e9ea83444c6d46de43c9
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm