REP_DPN0VZL9[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
REP_DPN0VZL9.doc
Size 190KB
Sample200904-3qfswc6ssa
SHA256 c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daada
MD5 043dc10181058e0f9f4c869ac3319a06
SHA1 9ebd03233f2a5a87c08b7cbc1dea5368af698456
SHA512 905e40be266ea5af59a99b6948da6c4926069d6eb1343f60fb6ab2cba3f0d336d5a51d5e1491fef57fc4ee6a679eb971f007e33928682d4c78630b58c535b167
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

REP_DPN0VZL9.doc

.doc 190KB

REP_DPN0VZL9.doc

SHA256 c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daada
MD5 043dc10181058e0f9f4c869ac3319a06
SHA1 9ebd03233f2a5a87c08b7cbc1dea5368af698456
SHA512 905e40be266ea5af59a99b6948da6c4926069d6eb1343f60fb6ab2cba3f0d336d5a51d5e1491fef57fc4ee6a679eb971f007e33928682d4c78630b58c535b167
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Ocfdthw6z5i5

V0cwe4yhe6gj3vvg