2022-03-29_1253[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2022-03-29_1253.xls
Size 126KB
Sample220329-natwksdcc6
SHA256 95afc5a338cfff3bc76c56bb78ea18097e81ae6f976cdd47d5f8a5d3f891d0fd
MD5 578ffd0a86732d2ab208e03359d68fa3
SHA1 4d8d7fb97de03e5a619f7afa24c47371b33c7af9
SHA512 1b2e3c66a442c8f575e921a96935a032b78b737a953c7ae24cb6ff6349645585485ff0883244dbf1c266842511387e8c7a0c30eef67eb2639f9f0d8c8aa63aa7
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

2022-03-29_1253.xls

.xls 126KB

2022-03-29_1253.xls

SHA256 95afc5a338cfff3bc76c56bb78ea18097e81ae6f976cdd47d5f8a5d3f891d0fd
MD5 578ffd0a86732d2ab208e03359d68fa3
SHA1 4d8d7fb97de03e5a619f7afa24c47371b33c7af9
SHA512 1b2e3c66a442c8f575e921a96935a032b78b737a953c7ae24cb6ff6349645585485ff0883244dbf1c266842511387e8c7a0c30eef67eb2639f9f0d8c8aa63aa7
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm