BAL_VFK_090120_YYB_093020[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_VFK_090120_YYB_093020.doc
Size 131KB
Sample200930-tf95e6dets
SHA256 bffc637d28966b991a1135f37d733cd4d1041f8fad86215d623d14b6b0ead577
MD5 71aa8b6212ac0991930baf26aef8a3d0
SHA1 09c5901eedae59be663d8c0dfac97b8a8dedad14
SHA512 52e4e5c6bd7c3af216120d7048d20c495cbc8c3adde711672125f70f9566241803de51862cfee546c88bb62ac94b8830788047cb2b806ba65db6948dbf90ca60
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_VFK_090120_YYB_093020.doc

.doc 131KB

BAL_VFK_090120_YYB_093020.doc

SHA256 bffc637d28966b991a1135f37d733cd4d1041f8fad86215d623d14b6b0ead577
MD5 71aa8b6212ac0991930baf26aef8a3d0
SHA1 09c5901eedae59be663d8c0dfac97b8a8dedad14
SHA512 52e4e5c6bd7c3af216120d7048d20c495cbc8c3adde711672125f70f9566241803de51862cfee546c88bb62ac94b8830788047cb2b806ba65db6948dbf90ca60
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro