ZHQ18YOAGBBZ0P2Z[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ZHQ18YOAGBBZ0P2Z.doc
Size 227KB
Sample200828-9733d78nys
SHA256 c189ded9fc09b53d7efb49717f0daf4934719d2055213cbcd73d205180fa1bca
MD5 cb9721cc76d7c53a9cd0e7342a6fed2c
SHA1 68ff6a41d0dfa3711e15f2134a35c9999d90bc82
SHA512 75b85a81ed4a1f88f2d3b6d3c2b4c3ba0e5086ec8c08cb427bff07647c0cc0876d780881b0ebc27697084134f7a3e4157d258d33e067fdcbdd4817d2c47f6af0
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

ZHQ18YOAGBBZ0P2Z.doc

.doc 227KB

ZHQ18YOAGBBZ0P2Z.doc

SHA256 c189ded9fc09b53d7efb49717f0daf4934719d2055213cbcd73d205180fa1bca
MD5 cb9721cc76d7c53a9cd0e7342a6fed2c
SHA1 68ff6a41d0dfa3711e15f2134a35c9999d90bc82
SHA512 75b85a81ed4a1f88f2d3b6d3c2b4c3ba0e5086ec8c08cb427bff07647c0cc0876d780881b0ebc27697084134f7a3e4157d258d33e067fdcbdd4817d2c47f6af0
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Xsc3dm7m3gt1t

H30gax8brotq_sy6i