406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6.doc
Size 188KB
Sample200717-s4ebzxwwcs
SHA256 406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6
MD5 653cd581da480ff6f93600f460d788b5
SHA1 903288de73cf9e93dc1847d1aad46fe41d6e1740
SHA512 48b602f74dd42b9a9787e03eb3ee5f2a6d469734565703b61f486ddec92aa86a2fb1e7a148ff0124437235a26db63968271143db68cded4a2d3e9f2f55a08e45
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6.doc

.doc 188KB

406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6.doc

SHA256 406a398f6828e6f4126857a68b99b35091e7c638c8a838c9862df41c4b0bc3d6
MD5 653cd581da480ff6f93600f460d788b5
SHA1 903288de73cf9e93dc1847d1aad46fe41d6e1740
SHA512 48b602f74dd42b9a9787e03eb3ee5f2a6d469734565703b61f486ddec92aa86a2fb1e7a148ff0124437235a26db63968271143db68cded4a2d3e9f2f55a08e45
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro