Scan 2022[.]29[.]03_1209[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Scan 2022.29.03_1209.xls
Size 126KB
Sample220329-ml33yshcbq
SHA256 5ce1b840a408fddaae1d38245033f780e949755d2caa8beb8ca870eff684a7d7
MD5 49d73e33d7e4e756c8aa1774a3557447
SHA1 43e1466afef6f1ed9608d0e3978924b483454b78
SHA512 5a296363d22fb782a94b8b2ab939bed14b35dffa391123c9809e100c5dfedba5a5ef3c0e1d767959baefd09691fb617635b253ce5395357e8e18debf6ba3037d
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Scan 2022.29.03_1209.xls

.xls 126KB

Scan 2022.29.03_1209.xls

SHA256 5ce1b840a408fddaae1d38245033f780e949755d2caa8beb8ca870eff684a7d7
MD5 49d73e33d7e4e756c8aa1774a3557447
SHA1 43e1466afef6f1ed9608d0e3978924b483454b78
SHA512 5a296363d22fb782a94b8b2ab939bed14b35dffa391123c9809e100c5dfedba5a5ef3c0e1d767959baefd09691fb617635b253ce5395357e8e18debf6ba3037d
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm