BAL_1BL0DVNFBIWKDX[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_1BL0DVNFBIWKDX.doc
Size 174KB
Sample200810-2fd2v2ea2n
SHA256 edcc83eab42c8192a4daa83887285b3884aacec4e95a3f6a17e6b2e3ff40213e
MD5 b1783ab4e5d342e3698ce6cba2d0daea
SHA1 968e9791726a1e199f76f05231bbc603daa17c11
SHA512 2440a68eda579d6394bc26306d218442afb7a4a24c9c7d7e97c478668de28a6c6e4816e5965e4e3daa08e730c430004cb6ca6bc7ed884af19d60d0cc86ca8ab4
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_1BL0DVNFBIWKDX.doc

.doc 174KB

BAL_1BL0DVNFBIWKDX.doc

SHA256 edcc83eab42c8192a4daa83887285b3884aacec4e95a3f6a17e6b2e3ff40213e
MD5 b1783ab4e5d342e3698ce6cba2d0daea
SHA1 968e9791726a1e199f76f05231bbc603daa17c11
SHA512 2440a68eda579d6394bc26306d218442afb7a4a24c9c7d7e97c478668de28a6c6e4816e5965e4e3daa08e730c430004cb6ca6bc7ed884af19d60d0cc86ca8ab4
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

RWDMMfeqybmppxwzx

DZPZAoxpayljvz