BAL_OTX_090120_LIT_090420[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_OTX_090120_LIT_090420.doc
Size 191KB
Sample200904-9nw81rtetn
SHA256 d4e4779bc7a595b54aef09d0febad3b0412b7919c11c7d60fb1350f25f9d8731
MD5 9f15e948bf98b5235115c6526e02efe9
SHA1 85855779c86f554c977259763282839db2c327d5
SHA512 389f79391b3b33016b6f7758c8e309a9ea3653dc21c6027173eadd81e36ee3913e1ca8f0fc9544e1cd55b6c110ff7016ca90a2650c3c6efcecf51c5f798f4060
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_OTX_090120_LIT_090420.doc

.doc 191KB

BAL_OTX_090120_LIT_090420.doc

SHA256 d4e4779bc7a595b54aef09d0febad3b0412b7919c11c7d60fb1350f25f9d8731
MD5 9f15e948bf98b5235115c6526e02efe9
SHA1 85855779c86f554c977259763282839db2c327d5
SHA512 389f79391b3b33016b6f7758c8e309a9ea3653dc21c6027173eadd81e36ee3913e1ca8f0fc9544e1cd55b6c110ff7016ca90a2650c3c6efcecf51c5f798f4060
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Ocfdthw6z5i5

V0cwe4yhe6gj3vvg