check[.]xls | Triage™

General

Target
check.xls
Size 101KB
Sample220121-z9lvssbehm
SHA256 0d8fd18da3cd6590f94cd2d23948427748b6ff51a0807e1e09ba59b78ab57662
MD5 bf1d2419bda6068e37f85d3f8ed4eee0
SHA1 5ced3c65e1888499ab50c3eaef225255c1cc91c2
SHA512 48721ca0823fd57de6dbda793ec24f8062803ef4b16df33054d98dda98f0700348f434bd657b584efda2d5e33b71854686b32101033ea198b89a0ce31c46ba64
SSDEEP 3072:n/k3hbdlylKsgqopeJBWhZFGkE+cL2NdAFxe53lGvFTQ3IzxgdrvxpU0OKvMB:/k3hbdlylKsgqopeJBWhZFVE+W2NdAO
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

SHA256 0d8fd18da3cd6590f94cd2d23948427748b6ff51a0807e1e09ba59b78ab57662
MD5 bf1d2419bda6068e37f85d3f8ed4eee0
SHA1 5ced3c65e1888499ab50c3eaef225255c1cc91c2
SHA512 48721ca0823fd57de6dbda793ec24f8062803ef4b16df33054d98dda98f0700348f434bd657b584efda2d5e33b71854686b32101033ea198b89a0ce31c46ba64
SSDEEP 3072:n/k3hbdlylKsgqopeJBWhZFGkE+cL2NdAFxe53lGvFTQ3IzxgdrvxpU0OKvMB:/k3hbdlylKsgqopeJBWhZFVE+W2NdAO
MD5 SHA1 SHA512 SSDEEP

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm