BAL_CHZ_070120_PIS_073020[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_CHZ_070120_PIS_073020.doc
Size 177KB
Sample200731-atwv91ctxj
SHA256 a1e1a7050d516befe59fdb7381ea2c2c7fe49f9764cfcc1345c5b84dc471c145
MD5 76b37e3e3d5600f49bdf558bb0ca2625
SHA1 13d6073b1eb06ff4af757bac41a6fabb9649acbe
SHA512 0ff55ab5c01b280f596c065e6a3c624202df652f2c21bcc7a504da0816f9fb011171864b830b01ad370d3f8c08ce5194b105800a852342cf97740edb1c58ea91
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_CHZ_070120_PIS_073020.doc

.doc 177KB

BAL_CHZ_070120_PIS_073020.doc

SHA256 a1e1a7050d516befe59fdb7381ea2c2c7fe49f9764cfcc1345c5b84dc471c145
MD5 76b37e3e3d5600f49bdf558bb0ca2625
SHA1 13d6073b1eb06ff4af757bac41a6fabb9649acbe
SHA512 0ff55ab5c01b280f596c065e6a3c624202df652f2c21bcc7a504da0816f9fb011171864b830b01ad370d3f8c08ce5194b105800a852342cf97740edb1c58ea91
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro