MES_3854[.]xls | Triage™

General

Target
MES_3854.xls
Size 101KB
Sample220404-m59d3shddk
SHA256 bf6f906e69a4245fa12be92220db6bb8a9c5aa34026a8920aa5e29ce3d6adc60
MD5 63afa97abf8c429c99a5720fe3877012
SHA1 feda3bf501d3cce7a512cdde05a99ec938db1c38
SHA512 d28829aa92297303953e3dd95064ff49e81f6cadfb3f2526688184528271a188a1c1858a3b288f91a5a6be59c733043a74a468c1daa10bc567a614e219dbe561
SSDEEP 3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8O6:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+b
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

SHA256 bf6f906e69a4245fa12be92220db6bb8a9c5aa34026a8920aa5e29ce3d6adc60
MD5 63afa97abf8c429c99a5720fe3877012
SHA1 feda3bf501d3cce7a512cdde05a99ec938db1c38
SHA512 d28829aa92297303953e3dd95064ff49e81f6cadfb3f2526688184528271a188a1c1858a3b288f91a5a6be59c733043a74a468c1daa10bc567a614e219dbe561
SSDEEP 3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8O6:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+b
MD5 SHA1 SHA512 SSDEEP

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm