MES-JZ465219[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
MES-JZ465219.doc
Size 252KB
Sample200917-rae77sntj2
SHA256 4d24738568acaa4cb1874eb562dc8868c8097922ed0cedbb56f60f21135f5b93
MD5 b68acca86799e76d0c60672cb4f627f2
SHA1 fed7b53a5ef2ce46d2a8d99267c7da70f7acdd4a
SHA512 1398f098be65ba098fc217d8e534df31a24212340eb046b316aca175cf90484565f161879f93c5b103e88cefe8bda739618b86277b595e0124429326289ab04a
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

MES-JZ465219.doc

.doc 252KB

MES-JZ465219.doc

SHA256 4d24738568acaa4cb1874eb562dc8868c8097922ed0cedbb56f60f21135f5b93
MD5 b68acca86799e76d0c60672cb4f627f2
SHA1 fed7b53a5ef2ce46d2a8d99267c7da70f7acdd4a
SHA512 1398f098be65ba098fc217d8e534df31a24212340eb046b316aca175cf90484565f161879f93c5b103e88cefe8bda739618b86277b595e0124429326289ab04a
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Aqu_yr8mogy

Usaqwpq7yw9p0lsv