S_PO_08282020EX[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
S_PO_08282020EX.doc
Size 227KB
Sample200828-cr855vxyda
SHA256 0e287fcb8945bc80f23530fe19b66eafa4746a037c2d30aeff88bc7f1b8602cd
MD5 26f7235425f5ef61def4c4d3bacd265e
SHA1 033ba3036be35a49e1ac6020d00653286d4d4d15
SHA512 c585ac8ddd4b898bbea71519e5b64dd96c9c9799f081bae90b61b44814359c063b03a572cc2b3b8030f2ea54b873cd59e8a9b9f752c04af601c71aedc25b2781
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

S_PO_08282020EX.doc

.doc 227KB

S_PO_08282020EX.doc

SHA256 0e287fcb8945bc80f23530fe19b66eafa4746a037c2d30aeff88bc7f1b8602cd
MD5 26f7235425f5ef61def4c4d3bacd265e
SHA1 033ba3036be35a49e1ac6020d00653286d4d4d15
SHA512 c585ac8ddd4b898bbea71519e5b64dd96c9c9799f081bae90b61b44814359c063b03a572cc2b3b8030f2ea54b873cd59e8a9b9f752c04af601c71aedc25b2781
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Xsc3dm7m3gt1t

H30gax8brotq_sy6i