REP_GBN_090120_JPW_090420[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
REP_GBN_090120_JPW_090420.doc
Size 190KB
Sample200903-8xth83ybk2
SHA256 4f571caa06d699bbfa89b824c79287911daedd1ce930b97f76d74c6e9add4895
MD5 5af0c04df59378cda460bc44229e56b2
SHA1 cef9502c57aaf0240cdccbcd576948b5ef9f183e
SHA512 d98d3be7ef1d25fee988774bc37edb44af8fc7e6c07524f4d516dabffcc87bdcd14d424485f06046966d3e18495b2efa9b34513a39d7cb39ffb2146e6dfd93ec
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

REP_GBN_090120_JPW_090420.doc

.doc 190KB

REP_GBN_090120_JPW_090420.doc

SHA256 4f571caa06d699bbfa89b824c79287911daedd1ce930b97f76d74c6e9add4895
MD5 5af0c04df59378cda460bc44229e56b2
SHA1 cef9502c57aaf0240cdccbcd576948b5ef9f183e
SHA512 d98d3be7ef1d25fee988774bc37edb44af8fc7e6c07524f4d516dabffcc87bdcd14d424485f06046966d3e18495b2efa9b34513a39d7cb39ffb2146e6dfd93ec
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Ocfdthw6z5i5

V0cwe4yhe6gj3vvg