W-9 form copy[.]zip | Triage™

Resubmissions

25/03/2022, 00:56

220325-bamfaaecej

24/03/2022, 20:20

220324-y4jmtadhh510

Sharing

Copy URL Twitter E-mail

General

Target
W-9 form copy.zip
Size 115KB
Sample220325-bamfaaecej
SHA256 b295a9973be8a233cee5abc10cef63e558ab2544d6fb54800b176c6b2de85e6e
MD5 03f60a6dbe63d8e9c06e13b1adbf586f
SHA1 518efdf0a949d10db89edf3ba838f9579b8661bd
SHA512 58656f14cd25802879a9bc3e7712fcffc0afdfe9c1d2832eacfd642a0c1dbbcf7755b2e8a1c5e9a3d199fe0b95b913a3f960e190b7d2b4278ce278f20d951cac
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
static1/unpack001/W-9 form.xls	office_xlm_macros

File Explorer

W-9 form copy.zip

.zip 115KB
W-9 form.xls

.xls 142KB

W-9 form copy.zip

SHA256 b295a9973be8a233cee5abc10cef63e558ab2544d6fb54800b176c6b2de85e6e
MD5 03f60a6dbe63d8e9c06e13b1adbf586f
SHA1 518efdf0a949d10db89edf3ba838f9579b8661bd
SHA512 58656f14cd25802879a9bc3e7712fcffc0afdfe9c1d2832eacfd642a0c1dbbcf7755b2e8a1c5e9a3d199fe0b95b913a3f960e190b7d2b4278ce278f20d951cac
MD5 SHA1 SHA512

Password

8078