msoffice_invoice1764727[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
msoffice_invoice1764727.doc
Size 97KB
Sample200803-gexmw79xys
SHA256 eef4b50a6a9a4371bc70b9b79d033053f0419c8c216118a6b5046117e4d6e272
MD5 5d38f68c18e3d9557523b25ad3fe4a86
SHA1 a2c736b4bb06131dbb828c79711a1c7ec729d501
SHA512 4a6dcba8e2563f09dda60ac52dcda7f93e699f254a745d04ebbec57564e37371470e9d41473c2e33ad11256dea9f7a811810aeab1263a203048058c83a3f73f9
MD5 SHA1 SHA512

Score

8^/10

macro xlm macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros
sample	office_macros

File Explorer

msoffice_invoice1764727.doc

.doc 97KB

msoffice_invoice1764727.doc

SHA256 eef4b50a6a9a4371bc70b9b79d033053f0419c8c216118a6b5046117e4d6e272
MD5 5d38f68c18e3d9557523b25ad3fe4a86
SHA1 a2c736b4bb06131dbb828c79711a1c7ec729d501
SHA512 4a6dcba8e2563f09dda60ac52dcda7f93e699f254a745d04ebbec57564e37371470e9d41473c2e33ad11256dea9f7a811810aeab1263a203048058c83a3f73f9
MD5 SHA1 SHA512

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action
Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm

ThisDocument

Module1