EXCELntDonut_CS_obf_evasion4[.]xlsm | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EXCELntDonut_CS_obf_evasion4.xlsm
Size

64KB
MD5

e383a87b2761c385de01fe8d824cb4ba
SHA1

bee7202f0658943a10acf78e02c7870e2485a4af
SHA256

c9727a6acd09b40f086f3e713c4b7d88af65ea1b22375ff8fa4abbd322fcae89
SHA512

a8d7d51b63f41156be3c6c3b13756c8cf2a8f2b3e1f79c7c4030ba95c33db13b1cd3c78504893701222ed33da76a1d0c2cccd44f7ab4b495e255068464de1085
SSDEEP

1536:WWRjzcSNC3mnnEAiwg7nH6aYlcJ6kmrZt8KrVncMUxWu:WWZh7EAUl87mKrI1

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Files

EXCELntDonut_CS_obf_evasion4.xlsm
.xlsm .ps1 office2007