tmp_n6ahuet

General

Target
tmp_n6ahuet
Size 155KB
Sample220127-xbt3eahagn
SHA256 d544142f7564a9b9fa7305f8614dd44ce496479b54eccac74a0ef2ca87c5f2d2
MD5 98a5583744fb02f85c045622135f00ae
SHA1 297958411347a171970e0552e99d9e55c1bdee96
SHA512 2cc25745b6a6888171d6f6bde83082f2abeb555e46a2fe852030e6b218f0085eee22a7bdb4b6e0b53f01ae43010fff82986aaaccfd819ef294b10a9e8adc31fc
SSDEEP 3072:zs+Hyms0k3hbdlylKsgqopeJBWhZFGkE+cMLxAAIb4UgCEqM5mheHRAjNKnlGIz:o+Hyms0k3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

SHA256 d544142f7564a9b9fa7305f8614dd44ce496479b54eccac74a0ef2ca87c5f2d2
MD5 98a5583744fb02f85c045622135f00ae
SHA1 297958411347a171970e0552e99d9e55c1bdee96
SHA512 2cc25745b6a6888171d6f6bde83082f2abeb555e46a2fe852030e6b218f0085eee22a7bdb4b6e0b53f01ae43010fff82986aaaccfd819ef294b10a9e8adc31fc
SSDEEP 3072:zs+Hyms0k3hbdlylKsgqopeJBWhZFGkE+cMLxAAIb4UgCEqM5mheHRAjNKnlGIz:o+Hyms0k3hbdlylKsgqopeJBWhZFVE+
MD5 SHA1 SHA512 SSDEEP

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm