emotet_e1_7933d8d9847728baa3c56f3d63a5539deb3a9260f1d7e03df15affdaed3a57b9_2020-09-23__170016437769[.]_doc | Triage

Sharing

General

Target

emotet_e1_7933d8d9847728baa3c56f3d63a5539deb3a9260f1d7e03df15affdaed3a57b9_2020-09-23__170016437769._doc
Size

160KB
MD5

0ed5a42c5691a1ab4c27bf8c2aed5210
SHA1

2d43412fc8c55c9a2d7a2c2d3f18c6adc96f867d
SHA256

7933d8d9847728baa3c56f3d63a5539deb3a9260f1d7e03df15affdaed3a57b9
SHA512

16034e9b9931d93b0f245f86fa4efb5aeabd86d9840087a86d1b691262703d6cd2b945fafe1a8044a87e5c7adf14eab0a1a01d4eb0fbbed6a840885276ebfe76

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

emotet_e1_7933d8d9847728baa3c56f3d63a5539deb3a9260f1d7e03df15affdaed3a57b9_2020-09-23__170016437769._doc
.doc windows office2003