Scan 2022[.]29[.]03_1312[.]xls | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Scan 2022.29.03_1312.xls
Size 126KB
Sample220329-nmp36ahecm
SHA256 68ae9bd4498bd077c5e0200bef2aa21a028e4cd90587d80788b9cb7955b35b81
MD5 0c4248cb24808ab268806ec605779267
SHA1 c45416c861388f836846aa22f0ad27155cb38634
SHA512 7748ccc2a88c6b15cd59aa6355dba10c831af8e54989bd504069c21bb6b9a28bb90582fd55559be4ff49d4ac087f88c730f85573a49892c8548169dff8533f55
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Scan 2022.29.03_1312.xls

.xls 126KB

Scan 2022.29.03_1312.xls

SHA256 68ae9bd4498bd077c5e0200bef2aa21a028e4cd90587d80788b9cb7955b35b81
MD5 0c4248cb24808ab268806ec605779267
SHA1 c45416c861388f836846aa22f0ad27155cb38634
SHA512 7748ccc2a88c6b15cd59aa6355dba10c831af8e54989bd504069c21bb6b9a28bb90582fd55559be4ff49d4ac087f88c730f85573a49892c8548169dff8533f55
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm