INV_NSP_090120_FQZ_090320[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
INV_NSP_090120_FQZ_090320.doc
Size 187KB
Sample200903-nta42yt5ba
SHA256 ac9d5e35356d8ecf567a0b54ac19629374bdb8ffa6df930c7980ce4e6e780cf2
MD5 e0e24d6b64c9d456ef7948584aa7ef15
SHA1 d93dc7e1370c877d94a7741c0cbca4f44225ff17
SHA512 fbe244cb4456dba1f2c57d2163f915ffdbe93b968a5eafc900479080c48283533333f36e8346bdb3f4a40ba5b603dc9065932d70ddc948a5ee2e33f92c2834ca
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

INV_NSP_090120_FQZ_090320.doc

.doc 187KB

INV_NSP_090120_FQZ_090320.doc

SHA256 ac9d5e35356d8ecf567a0b54ac19629374bdb8ffa6df930c7980ce4e6e780cf2
MD5 e0e24d6b64c9d456ef7948584aa7ef15
SHA1 d93dc7e1370c877d94a7741c0cbca4f44225ff17
SHA512 fbe244cb4456dba1f2c57d2163f915ffdbe93b968a5eafc900479080c48283533333f36e8346bdb3f4a40ba5b603dc9065932d70ddc948a5ee2e33f92c2834ca
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Vbn10wcszy2k0lv5

A0_x95ikfeh