H_17900168[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
H_17900168.doc
Size 190KB
Sample200903-csl8511sps
SHA256 70456cbd5863ba0a0589d9c519d57d90f5ff4276ddfea58d14f1ebdcfcb43ff1
MD5 38d627f1925d27f18618a83636f3bee1
SHA1 d674ed91adc59c8c66350d0186fea336ca4d4ffc
SHA512 94c46cb8e862af403112f60caa63c3e3b2bb0f8e9e8ad1843fac849daf634c337cf64e2f9d79281dd933ebe6c184921b0937aa854dd313a3d2110ee24389ea99
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

H_17900168.doc

.doc 190KB

H_17900168.doc

SHA256 70456cbd5863ba0a0589d9c519d57d90f5ff4276ddfea58d14f1ebdcfcb43ff1
MD5 38d627f1925d27f18618a83636f3bee1
SHA1 d674ed91adc59c8c66350d0186fea336ca4d4ffc
SHA512 94c46cb8e862af403112f60caa63c3e3b2bb0f8e9e8ad1843fac849daf634c337cf64e2f9d79281dd933ebe6c184921b0937aa854dd313a3d2110ee24389ea99
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Ocfdthw6z5i5

V0cwe4yhe6gj3vvg