1[.]ppt | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
1.ppt
Size 133KB
Sample200713-vfhmvtjhw2
SHA256 9ec91c2e598fa8c822f03180534c482e23350bfa8b222a41298e76c66e4a21bc
MD5 9346780ab7b6cd3f14999d93844f5ee0
SHA1 2caee21feda4f0f3a791ad3e6440ef4ab1b22dcc
SHA512 300411bb2b9d669d364a06b58cd465fa40ce119f3bcfdbae7c0617ac7262bceda7f5bad76c35a403e5dc37696684b95ee513e859ba9d05bb4bb5c27affb73625
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

1.ppt

.ppt .doc 133KB

1.ppt

SHA256 9ec91c2e598fa8c822f03180534c482e23350bfa8b222a41298e76c66e4a21bc
MD5 9346780ab7b6cd3f14999d93844f5ee0
SHA1 2caee21feda4f0f3a791ad3e6440ef4ab1b22dcc
SHA512 300411bb2b9d669d364a06b58cd465fa40ce119f3bcfdbae7c0617ac7262bceda7f5bad76c35a403e5dc37696684b95ee513e859ba9d05bb4bb5c27affb73625
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro