BAL_TI2848603485SE[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_TI2848603485SE.doc
Size 171KB
Sample200730-vyr13qsn2a
SHA256 9cff654dbc0f1645ce81c0805aab308a82c35ffdbdabe4853a1e91cbc344090e
MD5 1f7a4e4da76d325e0299b92954f82903
SHA1 e512f4c81a26af8ccdab18720a02d3741142542c
SHA512 411f02c4fdf8dc943e750ed456c73197b4022b044ff638e037311dec5603eb92ea5c19ca73c004dcac8344371b5bb90edbc7eee77f3b4e23de7c496f9e25afe9
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_TI2848603485SE.doc

.doc 171KB

BAL_TI2848603485SE.doc

SHA256 9cff654dbc0f1645ce81c0805aab308a82c35ffdbdabe4853a1e91cbc344090e
MD5 1f7a4e4da76d325e0299b92954f82903
SHA1 e512f4c81a26af8ccdab18720a02d3741142542c
SHA512 411f02c4fdf8dc943e750ed456c73197b4022b044ff638e037311dec5603eb92ea5c19ca73c004dcac8344371b5bb90edbc7eee77f3b4e23de7c496f9e25afe9
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro