Rolls-Royce WorkRequest[.]xls | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rolls-Royce WorkRequest.xls
Size

1.0MB
MD5

7136b13d17f838f389ecffd0e7088448
SHA1

bb23f40e72080d7d25c4b2d039823ce70530fb98
SHA256

26952a5f94905f2ddd711ea1b3103bfe03bc0198d4aea7ec2ca4b478344ab467
SHA512

5281546b3557c1c59427967b8ad0d4683276334adea04f316284cae12abb29c449929640ca785cc8c4d63ac3eefdcb01ef81e4323e480933162186f2dab1aacb
SSDEEP

24576:4LtGvEixjiTdFO26WvzstuVLSefUrg61jv7h9Duybl:4JQRnn/

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Files

Rolls-Royce WorkRequest.xls
.xls windows office2003