invoice-H7-798436[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
invoice-H7-798436.doc
Size 226KB
Sample200811-1lw8ds4rz2
SHA256 cbb857ef4e6a3fd6c97835111cd57faa9a633931718e00486d9d6ab47dbc88c0
MD5 c8d7be6e545919ec13eb02198bd6a1a8
SHA1 95d4ba0cb0b50775ae971638b9b5fcf235779331
SHA512 2a2a2623d0e22670f39a7e3abfd6fe6545d2c45addd3ea32b8e1f150cfa785636127e6e7f84efcbdb97bcf98a037de18b908b7cbda29741b3e8b4d7a160abc96
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

invoice-H7-798436.doc

.doc 226KB

invoice-H7-798436.doc

SHA256 cbb857ef4e6a3fd6c97835111cd57faa9a633931718e00486d9d6ab47dbc88c0
MD5 c8d7be6e545919ec13eb02198bd6a1a8
SHA1 95d4ba0cb0b50775ae971638b9b5fcf235779331
SHA512 2a2a2623d0e22670f39a7e3abfd6fe6545d2c45addd3ea32b8e1f150cfa785636127e6e7f84efcbdb97bcf98a037de18b908b7cbda29741b3e8b4d7a160abc96
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

ROKWRtnklpojknjipe

YFNZSpyuxxwj