RechnungScan_2020_09_6045184249[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RechnungScan_2020_09_6045184249.doc
Size 212KB
Sample200921-3a2lex2spj
SHA256 3783d48d6d44d88d9bf4bbb9eaa9b4f10b258447d45b5d8c2e49c5132cdc9284
MD5 ac2e182020a21eb6b018a9a13c520f28
SHA1 0393b9a0cd888340cac8664448dc0bae9b313a3f
SHA512 80bcd7514caae2de6da7459aff4d95986d170cf2ea361fbe636a52255a80dc5e5d5347b48e6365d5a605f06f6e80b6aba0c3948436bdaba806e5bc8e23d5c4c8
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

RechnungScan_2020_09_6045184249.doc

.doc 212KB

RechnungScan_2020_09_6045184249.doc

SHA256 3783d48d6d44d88d9bf4bbb9eaa9b4f10b258447d45b5d8c2e49c5132cdc9284
MD5 ac2e182020a21eb6b018a9a13c520f28
SHA1 0393b9a0cd888340cac8664448dc0bae9b313a3f
SHA512 80bcd7514caae2de6da7459aff4d95986d170cf2ea361fbe636a52255a80dc5e5d5347b48e6365d5a605f06f6e80b6aba0c3948436bdaba806e5bc8e23d5c4c8
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Pl1_pxqsk3_fhv

Mzir6jla3xix6