EH0158688190JE[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
EH0158688190JE.doc
Size 153KB
Sample200915-5rt8mpb7xs
SHA256 cb6e641825c4b9b3dedb8bca6f5e8759d21a3f5a72cecd7b8fee14075a09e27d
MD5 a3c7f3fe1c8308e1ac046fa9acaca376
SHA1 326f4e9ebc9e80973b2e31f8acf4e041e2de5156
SHA512 5f2bae01f089717bbc333d6097e4a2acf328acc26519b6c34d6894ac0f892eab4170f8a5958b5d7b4a3e9a44d5f722f72cd5bfce29fe9633365df76104e4994f
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

EH0158688190JE.doc

.doc 153KB

EH0158688190JE.doc

SHA256 cb6e641825c4b9b3dedb8bca6f5e8759d21a3f5a72cecd7b8fee14075a09e27d
MD5 a3c7f3fe1c8308e1ac046fa9acaca376
SHA1 326f4e9ebc9e80973b2e31f8acf4e041e2de5156
SHA512 5f2bae01f089717bbc333d6097e4a2acf328acc26519b6c34d6894ac0f892eab4170f8a5958b5d7b4a3e9a44d5f722f72cd5bfce29fe9633365df76104e4994f
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Xhx92_rprjsbz

Hpsd9g_lf27k5l2ku