e2ff2bb9e6f979423fce205fb0929f3d9d046a2bd457e4c0800fe678a7f0f2ff[.]zip[.]zip

Sharing

Target

e2ff2bb9e6f979423fce205fb0929f3d9d046a2bd457e4c0800fe678a7f0f2ff.zip.zip
Size

211KB
MD5

1b4acbe30af3cda94191775b6ac72a82
SHA1

7b183a9c382f5574dc30b3c308ca0f366d2e265d
SHA256

71aa7a96e4cdb222d227b423485d1cdc617addaabf2866c178b5012915f390c9
SHA512

571d37c84cb4bb925b74c921c3e720ece0f47a764348b53020b30ba960a6354200910fa73ddac892b2f341b2ed89a186b67b1bb7e447fe0479b356e4303799d6
SSDEEP

6144:eKB/rA4ZXJ9XCHXM/CfYt7mBA6BMrlT9R1:tBTAm7X//MYtz6BMB9r

Score

8^/10

macro xlm

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
static1/unpack002/1012BSD.xls	office_xlm_macros
static1/unpack002/10Q4BSD.xls	office_xlm_macros

e2ff2bb9e6f979423fce205fb0929f3d9d046a2bd457e4c0800fe678a7f0f2ff.zip.zip
.zip

Password: infected
e2ff2bb9e6f979423fce205fb0929f3d9d046a2bd457e4c0800fe678a7f0f2ff.zip
.rar
1010BSD.xls
.xls windows office2003
1010BSS.xls
.xls windows office2003
1010PLD.xls
.xls windows office2003
1010PLS.xls
.xls windows office2003
1011BSD.xls
.xls windows office2003
1011BSS.xls
.xls windows office2003
1011PLD.xls
.xls windows office2003
1011PLS.xls
.xls windows office2003
1012BSD.xls
.xls windows office2003
1012BSS.xls
.xls windows office2003
1012PLD.xls
.xls windows office2003
1012PLS.xls
.xls windows office2003
10Q4BSD.xls
.xls windows office2003
10Q4PLD.xls
.xls windows office2003
10Q4PLS.xls
.xls windows office2003
Budget Progress Report 10Q4.xls
.xls windows office2003