SecuriteInfo[.]com[.]VBA[.]Heur[.]LEmoDldr[.]1[.]Gen[.]31682[.]10107 | Triage

Sharing

General

Target

SecuriteInfo.com.VBA.Heur.LEmoDldr.1.Gen.31682.10107
Size

172KB
MD5

3241c95f7086aec84d5d4bf8f0cd7ac0
SHA1

0a3966d6e6b0a1bf8abd4b69165eddd1dd6139d7
SHA256

cc7bdd707f48d5b726a93953080eba89aeac024a738dee113d31c83c8ea8a88d
SHA512

8f32ccd3d32b742ef4de8c6e071eddda7e336fd846a2f08a25356cfec8a998bf9374fa4fda808d8fbc830ed04253f3b264cf3a5b31a387caa71edb04c3607c71

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

SecuriteInfo.com.VBA.Heur.LEmoDldr.1.Gen.31682.10107
.doc windows office2003