mes WF2859[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
mes WF2859.doc
Size 121KB
Sample200904-xvdxc4ewfe
SHA256 20f0a0ba4cd0dac615e918dd489d36a9dbe9da8eccd28074379ccb9297f44202
MD5 da3f11f9dc6104575d4828f2d1732250
SHA1 c44b8c8cc9bcfec593fbd9aba067b88fa6df6d0a
SHA512 071abf3ab6968f43722602e0c904a21f12e3aaa868f4ba9756d87134a3ab7a2ab6e7dfca7728aa9ac02bb3f65965817e6cfbd3b9666a3602dee213e4ae59d530
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

mes WF2859.doc

.doc 121KB

mes WF2859.doc

SHA256 20f0a0ba4cd0dac615e918dd489d36a9dbe9da8eccd28074379ccb9297f44202
MD5 da3f11f9dc6104575d4828f2d1732250
SHA1 c44b8c8cc9bcfec593fbd9aba067b88fa6df6d0a
SHA512 071abf3ab6968f43722602e0c904a21f12e3aaa868f4ba9756d87134a3ab7a2ab6e7dfca7728aa9ac02bb3f65965817e6cfbd3b9666a3602dee213e4ae59d530
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

G8pody_7y9budmxr

Gi4vgc9qnhotk001