ZGZ_090120_GNF_091520[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ZGZ_090120_GNF_091520.doc
Size 152KB
Sample200915-7c8ppnftf2
SHA256 5abfa0ce738ab27aa9b0500e4f341086d84c14031941b842341e5edf4d6cf3d8
MD5 f4929e99b0deaeeeb25acf3e6d77bcfd
SHA1 d67eebc212391b13190992178c3e1121e5f768e1
SHA512 dec5eff5c29985c71791335b893a510b23a54b1c833f5d63200abbf18be613656a1cff1136914d08520a5cd6eca67b4d1192a48e2a4e8aafaf7174da97aab06b
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

ZGZ_090120_GNF_091520.doc

.doc 152KB

ZGZ_090120_GNF_091520.doc

SHA256 5abfa0ce738ab27aa9b0500e4f341086d84c14031941b842341e5edf4d6cf3d8
MD5 f4929e99b0deaeeeb25acf3e6d77bcfd
SHA1 d67eebc212391b13190992178c3e1121e5f768e1
SHA512 dec5eff5c29985c71791335b893a510b23a54b1c833f5d63200abbf18be613656a1cff1136914d08520a5cd6eca67b4d1192a48e2a4e8aafaf7174da97aab06b
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Hbrg7oouijiyndic

Hpnbkaj4h867nu5