Payment status[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Payment status.doc
Size 217KB
Sample200828-1f585prel2
SHA256 4127b9c5397e1cb3b06cd7d59f06a08fef72ae8d071a7008d1159c12c0a7c8e6
MD5 b9cbd45aec370c89a6605ae19abc62ce
SHA1 73fa5d6c8bd488bb81abe181f4e3b388a5d12cf1
SHA512 5ba225fe172630c1114eadc088315acb074efd0a5b6151c4fbc71e8b6a5f69e5fb3567b6c321f4b81926f578ea0b9fafb58cb86bdd28b6c87f6069037d1c1de4
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Payment status.doc

.doc 217KB

Payment status.doc

SHA256 4127b9c5397e1cb3b06cd7d59f06a08fef72ae8d071a7008d1159c12c0a7c8e6
MD5 b9cbd45aec370c89a6605ae19abc62ce
SHA1 73fa5d6c8bd488bb81abe181f4e3b388a5d12cf1
SHA512 5ba225fe172630c1114eadc088315acb074efd0a5b6151c4fbc71e8b6a5f69e5fb3567b6c321f4b81926f578ea0b9fafb58cb86bdd28b6c87f6069037d1c1de4
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Qh9a037qh790nzp2q

Bo51h2c687jqkbq