36866 NL_37742[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
36866 NL_37742.doc
Size 128KB
Sample201014-6458wggfen
SHA256 8b335f22a41c3fafca9c21e3d8c381b4678dc3c812a98f60fdfebf6762fb8fc3
MD5 aea6a74b34de47e3b94eba7f082943ab
SHA1 a87de38bb24f62b20b46955da8c66e89ae216757
SHA512 3e85044268b31f37d7650cad29ba262dd19e21a690993fe81228443d4573f26fe56e39f903de0bf6fb70090ff85ccfce34d45badd321bc6c280de8ad9c8af0f3
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

36866 NL_37742.doc

.doc 128KB

36866 NL_37742.doc

SHA256 8b335f22a41c3fafca9c21e3d8c381b4678dc3c812a98f60fdfebf6762fb8fc3
MD5 aea6a74b34de47e3b94eba7f082943ab
SHA1 a87de38bb24f62b20b46955da8c66e89ae216757
SHA512 3e85044268b31f37d7650cad29ba262dd19e21a690993fe81228443d4573f26fe56e39f903de0bf6fb70090ff85ccfce34d45badd321bc6c280de8ad9c8af0f3
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro