Chapter 3[.]zip | Triage™

General

Target
Chapter 3.zip
Size 325KB
Sample261008-lp71mses9w
SHA256 f870cf0512dda5e93ee9f42443859204e065b3a0b76927379e3df8cf1d8fa92e
MD5 5f57805ae346bf468c48db58ec5c68f6
SHA1 c5e96fb096ff93470542ef34ee7ee48a7b2cc79d
SHA512 fd5866cb89763bbb485fe24e0ca17f77b0ea7fa62028bd60ef928f6a2dd4938b199d040634bb421441c40d683ed2b88314056a2be8084a5ffb46054744c0b4b5
SSDEEP 6144:aIKtsP7ZEGb2STwHnRdNaGatn1NlhwAW+aGMpV8Wy79qpFzlLX9:aIKtsqM2LxdNaGat1NQAW+anpV8We9q7
TLSH
T1D264238F1FC00A0397A5A1BC46F6A865ED1915E5E0F920CAEB3D71CD8DD90E2766F04E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
static1/unpack001/Chapter 3/TrickBot.xls	office_xlm_macros

SHA256 f870cf0512dda5e93ee9f42443859204e065b3a0b76927379e3df8cf1d8fa92e
MD5 5f57805ae346bf468c48db58ec5c68f6
SHA1 c5e96fb096ff93470542ef34ee7ee48a7b2cc79d
SHA512 fd5866cb89763bbb485fe24e0ca17f77b0ea7fa62028bd60ef928f6a2dd4938b199d040634bb421441c40d683ed2b88314056a2be8084a5ffb46054744c0b4b5
SSDEEP 6144:aIKtsP7ZEGb2STwHnRdNaGatn1NlhwAW+aGMpV8Wy79qpFzlLX9:aIKtsqM2LxdNaGat1NQAW+anpV8We9q7
TLSH
T1D264238F1FC00A0397A5A1BC46F6A865ED1915E5E0F920CAEB3D71CD8DD90E2766F04E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected