Rep[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Rep.doc
Size 233KB
Sample200904-hbmm4te37a
SHA256 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46a
MD5 c06d57cf4ff69be5df106a02fff48cbc
SHA1 9e75c4a7cf885de77a2fd21d00b4a9cac98bb14e
SHA512 6c19061f596dda2039f1a9079016eb7f9f97d5cbb8b98a12511a4a9da19a2d7691bd6c42e7bfbda2d6aa39e6185d43e16ace451b4bd730594c83b2d97efb5e29
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Rep.doc

.doc 233KB

Rep.doc

SHA256 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46a
MD5 c06d57cf4ff69be5df106a02fff48cbc
SHA1 9e75c4a7cf885de77a2fd21d00b4a9cac98bb14e
SHA512 6c19061f596dda2039f1a9079016eb7f9f97d5cbb8b98a12511a4a9da19a2d7691bd6c42e7bfbda2d6aa39e6185d43e16ace451b4bd730594c83b2d97efb5e29
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

W43tz5hu38adp

Dmjncamh_k8p