CST_090120_QQZ_091520[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
CST_090120_QQZ_091520.doc
Size 158KB
Sample200915-zdcsnj9xae
SHA256 84a3218db211f14f6afaf90ced3a518193158b80bbbf43bbf82a955d6064fa2d
MD5 fc6278b0d199e93b832ae9720e40cf77
SHA1 116aa48b76d2742ab9c08530ff443e19c5982164
SHA512 949465890f0fa78b302f6291dba5aefa9a73bc8c6105864858a4167ee954d3334a1a2cbec7afd1589466cbb04aa6a0f8014bcbaf7c6024440f7f441287325058
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

CST_090120_QQZ_091520.doc

.doc 158KB

CST_090120_QQZ_091520.doc

SHA256 84a3218db211f14f6afaf90ced3a518193158b80bbbf43bbf82a955d6064fa2d
MD5 fc6278b0d199e93b832ae9720e40cf77
SHA1 116aa48b76d2742ab9c08530ff443e19c5982164
SHA512 949465890f0fa78b302f6291dba5aefa9a73bc8c6105864858a4167ee954d3334a1a2cbec7afd1589466cbb04aa6a0f8014bcbaf7c6024440f7f441287325058
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

B2c5jxmp_evk3iyoea

Kyx1ghzp2jkdezvs