PO_08282020EX[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO_08282020EX.doc
Size 227KB
Sample200828-d57ql9ms6e
SHA256 8cf6b01062e8e8b955e35064a5ccf3ac9b35e40f191ccd7026dc0fc5067dd69e
MD5 65798a005387ccfea32f778c041ce9b3
SHA1 de35aa1365b7df72dc71a66d40a9d3f6b6f1523f
SHA512 20e88f4f3d2006981c471d8c808b138bbe4b62d380e1f9778a59c4046116566649f420842db27589794dff98fff6f938203924e9ddc6f5cd0328ba5fb310e88c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

PO_08282020EX.doc

.doc 227KB

PO_08282020EX.doc

SHA256 8cf6b01062e8e8b955e35064a5ccf3ac9b35e40f191ccd7026dc0fc5067dd69e
MD5 65798a005387ccfea32f778c041ce9b3
SHA1 de35aa1365b7df72dc71a66d40a9d3f6b6f1523f
SHA512 20e88f4f3d2006981c471d8c808b138bbe4b62d380e1f9778a59c4046116566649f420842db27589794dff98fff6f938203924e9ddc6f5cd0328ba5fb310e88c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Xsc3dm7m3gt1t

H30gax8brotq_sy6i