P0056 invoicing[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
P0056 invoicing.doc
Size 217KB
Sample200828-kcm4pfgct2
SHA256 b88ee9f0ad1a591659e9547e4eab2af49bf706001ead1cd568432bcaa49b76fe
MD5 eeb74dbfbb4a0c0b929a40ac78a48f7c
SHA1 b92aa63cb168228eafb4c3ce5e4cec2b2b31f1a9
SHA512 ef0782fb018a1b29c6b3c90244fc38c0b69ba9a1106a31be1f9860ad9233cd588bf7f2881fd79b5a7fb98aa44feb5a965ac37eb45cd80ce5b85c2a27e8e1729c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

P0056 invoicing.doc

.doc 217KB

P0056 invoicing.doc

SHA256 b88ee9f0ad1a591659e9547e4eab2af49bf706001ead1cd568432bcaa49b76fe
MD5 eeb74dbfbb4a0c0b929a40ac78a48f7c
SHA1 b92aa63cb168228eafb4c3ce5e4cec2b2b31f1a9
SHA512 ef0782fb018a1b29c6b3c90244fc38c0b69ba9a1106a31be1f9860ad9233cd588bf7f2881fd79b5a7fb98aa44feb5a965ac37eb45cd80ce5b85c2a27e8e1729c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Qh9a037qh790nzp2q

Bo51h2c687jqkbq