imedpub[.]xls | Triage™

General

Target
imedpub.xls
Size 154KB
Sample220127-tkm4nsfddq
SHA256 48a177e008cdc6cabc24550d92b187e578a4cae3294868bb333f51fde416c99a
MD5 6c86f29ab53629804ab11e1bc80b93fb
SHA1 3e27e455ead1bf7737e6e4002a78df42997c0f53
SHA512 6e64563e88d8613b48e6c69c4474d72fdcb42f826fb5dda4ec400646804fc3730f4f4dd4f3f932f7e9dfc8fa1e4acf0c05105eb9efbbdeadf0d9fe5ca1b7258e
SSDEEP 3072:zs+Hyms0k3hbdlylKsgqopeJBWhZFGkE+cMLxAAIb4UgCEqM5mheHRAjNKnlGIz:o+Hyms0k3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

SHA256 48a177e008cdc6cabc24550d92b187e578a4cae3294868bb333f51fde416c99a
MD5 6c86f29ab53629804ab11e1bc80b93fb
SHA1 3e27e455ead1bf7737e6e4002a78df42997c0f53
SHA512 6e64563e88d8613b48e6c69c4474d72fdcb42f826fb5dda4ec400646804fc3730f4f4dd4f3f932f7e9dfc8fa1e4acf0c05105eb9efbbdeadf0d9fe5ca1b7258e
SSDEEP 3072:zs+Hyms0k3hbdlylKsgqopeJBWhZFGkE+cMLxAAIb4UgCEqM5mheHRAjNKnlGIz:o+Hyms0k3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm