REP_NIW4M279H[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
REP_NIW4M279H.doc
Size 187KB
Sample200903-qb2mk2lfw6
SHA256 fbede719be1983fff9ca06d29412edfcfbac49c78901582ccf686c3f3e50e2c5
MD5 2f48aa39a8b4a370c0ea65834ffff5c0
SHA1 6f30391f5c8f20b93777999fb9fe19522330a636
SHA512 f0e149821aff786fa1d57a1f7f7e39e1fcafaa978f75d46883a94f268deb741303d3ad7c60d817a13a57afc99705cba0f0f8785a77ded825e93bc4c6ac3af8ea
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

REP_NIW4M279H.doc

.doc 187KB

REP_NIW4M279H.doc

SHA256 fbede719be1983fff9ca06d29412edfcfbac49c78901582ccf686c3f3e50e2c5
MD5 2f48aa39a8b4a370c0ea65834ffff5c0
SHA1 6f30391f5c8f20b93777999fb9fe19522330a636
SHA512 f0e149821aff786fa1d57a1f7f7e39e1fcafaa978f75d46883a94f268deb741303d3ad7c60d817a13a57afc99705cba0f0f8785a77ded825e93bc4c6ac3af8ea
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Vbn10wcszy2k0lv5

A0_x95ikfeh