f905b3173209683942d189354d7a6946 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
f905b3173209683942d189354d7a6946
Size 126KB
Sample220329-shavwsbcfr
SHA256 3a6cecb154c56030899e87ee4a0eace7cf598c93aaea1c167ca2eed54e85ae54
MD5 f905b3173209683942d189354d7a6946
SHA1 e8bb2c1ac7f4c13ff1a31f3429b989acd71e3138
SHA512 cd33a811a88d1cff83a720b5707a88e784c4c52ee87feced467ff4f1eff0cfa8925d23197f77213875f33b38a1608783bc2f13a05599a42dfca112e548a53801
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

f905b3173209683942d189354d7a6946

.xls 126KB

f905b3173209683942d189354d7a6946

SHA256 3a6cecb154c56030899e87ee4a0eace7cf598c93aaea1c167ca2eed54e85ae54
MD5 f905b3173209683942d189354d7a6946
SHA1 e8bb2c1ac7f4c13ff1a31f3429b989acd71e3138
SHA512 cd33a811a88d1cff83a720b5707a88e784c4c52ee87feced467ff4f1eff0cfa8925d23197f77213875f33b38a1608783bc2f13a05599a42dfca112e548a53801
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm