INV #335 FOR PO #9535862866[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
INV #335 FOR PO #9535862866.doc
Size 217KB
Sample200828-sd763vjb1j
SHA256 09eddadf65f25a4d9a24eae86f3eccc6eeac2d2af3119875adeebd706cef404e
MD5 ae60f281942d906a20c0428cfe937360
SHA1 786800404051202694d045ad65e7d81082dbcda0
SHA512 b952361a2e8a7bfc1993fca9fd2165dbabfe1f317f553d00adb2663349fedffc59442f31a373bfe958100ecb3b47c95ca16a5b560d929ad47f6e5382670b9f15
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

INV #335 FOR PO #9535862866.doc

.doc 217KB

INV #335 FOR PO #9535862866.doc

SHA256 09eddadf65f25a4d9a24eae86f3eccc6eeac2d2af3119875adeebd706cef404e
MD5 ae60f281942d906a20c0428cfe937360
SHA1 786800404051202694d045ad65e7d81082dbcda0
SHA512 b952361a2e8a7bfc1993fca9fd2165dbabfe1f317f553d00adb2663349fedffc59442f31a373bfe958100ecb3b47c95ca16a5b560d929ad47f6e5382670b9f15
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Qh9a037qh790nzp2q

Bo51h2c687jqkbq