ST_Heodo_ST_postacert_2[.]eml_OCZ100120XID101420[.]doc_analyze[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ST_Heodo_ST_postacert_2.eml_OCZ100120XID101420.doc_analyze.doc
Size 127KB
Sample201014-4askrmnsa2
SHA256 8953f2080a89c02db800018674bc763ddc73022ca7d77ad2b3295cc6c1822ca6
MD5 7f90f6e3385493472b3652837e20c719
SHA1 c468de23430d23a93e51ed5088cbf4a8ebcc7053
SHA512 43a34126374f81d4a4d951b855160edf603887f90275513fc82d0a1bca6a2c92c5ab4fb26862dd08e4adde0057f3ccb519245a66a8391a8f61a1ab236e53b3dc
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

ST_Heodo_ST_postacert_2.eml_OCZ100120XID101420.doc_analyze.doc

.doc 127KB

ST_Heodo_ST_postacert_2.eml_OCZ100120XID101420.doc_analyze.doc

SHA256 8953f2080a89c02db800018674bc763ddc73022ca7d77ad2b3295cc6c1822ca6
MD5 7f90f6e3385493472b3652837e20c719
SHA1 c468de23430d23a93e51ed5088cbf4a8ebcc7053
SHA512 43a34126374f81d4a4d951b855160edf603887f90275513fc82d0a1bca6a2c92c5ab4fb26862dd08e4adde0057f3ccb519245a66a8391a8f61a1ab236e53b3dc
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro