FSTRQFSP5[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
FSTRQFSP5.doc
Size 175KB
Sample200806-2s57mab7a2
SHA256 3a8a7bb3d3cac21614a78a6ee59a7b7d5f4e9d0cc161d48a68fa99616098766e
MD5 ec50134f9c140e1a30090b0db4159887
SHA1 f1dbe113e00515b35cf252882b90fd0b8d2d12c5
SHA512 d45c2d68261180ab85640eaf5caa9f2cee8b481198ebc582c6e6eff6afee5b748dbedd8f293f6f6b4e07908d0bf0c451b2bfd073f9cb3500975a6d3d1f01ce1a
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

FSTRQFSP5.doc

.doc 175KB

FSTRQFSP5.doc

SHA256 3a8a7bb3d3cac21614a78a6ee59a7b7d5f4e9d0cc161d48a68fa99616098766e
MD5 ec50134f9c140e1a30090b0db4159887
SHA1 f1dbe113e00515b35cf252882b90fd0b8d2d12c5
SHA512 d45c2d68261180ab85640eaf5caa9f2cee8b481198ebc582c6e6eff6afee5b748dbedd8f293f6f6b4e07908d0bf0c451b2bfd073f9cb3500975a6d3d1f01ce1a
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

YNOMGsfzujrthhzxse

YWUOBacpbabyfoay