payment_1[.]xls | Triage™

General

Target
payment_1.xls
Size 107KB
Sample220122-wn623acfcp
SHA256 6486f4730c2041aa4e8c96ecc214d10c1b014e958e85d01c2da7934b984fb42e
MD5 1687db9a923f48cab5a32cdfc450b66f
SHA1 bea928fd72be2c9846d95f0a5c183e0b4f8a22b6
SHA512 a84be27a6d2f0b44fefb36b0e06f1ad037bb6248a22f2c2a1ae6cc638e2bd3d9405ce8192b4e0be338d8082c1d748e14a02be60dba3e7a34e4f515f617b1f642
SSDEEP 3072:+C+nBqmxk3hbdlylKsgqopeJBWhZFGkE+cMLxAAIFxe53lGvFTQ3IzxgdrvxpU0:R+nBqmxk3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

SHA256 6486f4730c2041aa4e8c96ecc214d10c1b014e958e85d01c2da7934b984fb42e
MD5 1687db9a923f48cab5a32cdfc450b66f
SHA1 bea928fd72be2c9846d95f0a5c183e0b4f8a22b6
SHA512 a84be27a6d2f0b44fefb36b0e06f1ad037bb6248a22f2c2a1ae6cc638e2bd3d9405ce8192b4e0be338d8082c1d748e14a02be60dba3e7a34e4f515f617b1f642
SSDEEP 3072:+C+nBqmxk3hbdlylKsgqopeJBWhZFGkE+cMLxAAIFxe53lGvFTQ3IzxgdrvxpU0:R+nBqmxk3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm