Mes_JEH4692[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Mes_JEH4692.doc
Size 236KB
Sample200904-b8xcl4aesx
SHA256 9cf29b7fcce905e807fd1e4493af36f7f0e8618912601f1a85cf52af6d38d6b8
MD5 9c44f6e88a5bc8f0c223b0745da75082
SHA1 e7438fbe23112f86c66d8483bdde92e9646064e0
SHA512 f89675ad4c91543b999cc1ace940852413e3035dcc08e2bc1fab9eb9021ba77f531e10b461428773e4cbcb297a3b0083d1220e7f8e176ffaa2990027fb119e78
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Mes_JEH4692.doc

.doc 236KB

Mes_JEH4692.doc

SHA256 9cf29b7fcce905e807fd1e4493af36f7f0e8618912601f1a85cf52af6d38d6b8
MD5 9c44f6e88a5bc8f0c223b0745da75082
SHA1 e7438fbe23112f86c66d8483bdde92e9646064e0
SHA512 f89675ad4c91543b999cc1ace940852413e3035dcc08e2bc1fab9eb9021ba77f531e10b461428773e4cbcb297a3b0083d1220e7f8e176ffaa2990027fb119e78
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Lbp1q7_mfhvs8o87

Q3ge9ro4a1e