MES_NDQ368611[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MES_NDQ368611.doc
Size 182KB
Sample200904-lesrfk1ps2
SHA256 8a45d8a55c131c2f4b1eaa589e8fa23363814399c07e65ee602957fa88d6a976
MD5 1233cfecb7185aa7c9e2ef5fac34b325
SHA1 484c9813cd94c23cfb9adece990e1de7b9a8da92
SHA512 c3819a4aa3b1f8beb94bc5f1648a7c835f419a96d603343d995790e2b64e30e062e765ba5f32d3db0d96b36e0449656b1ebf1fc46b37861c128fb67c65b35caf
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

MES_NDQ368611.doc

.doc 182KB

MES_NDQ368611.doc

SHA256 8a45d8a55c131c2f4b1eaa589e8fa23363814399c07e65ee602957fa88d6a976
MD5 1233cfecb7185aa7c9e2ef5fac34b325
SHA1 484c9813cd94c23cfb9adece990e1de7b9a8da92
SHA512 c3819a4aa3b1f8beb94bc5f1648a7c835f419a96d603343d995790e2b64e30e062e765ba5f32d3db0d96b36e0449656b1ebf1fc46b37861c128fb67c65b35caf
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Sj90g706o6iih58jo

Qvucjedyedd3da9