REP_ORX_100120_GUI_101720[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
REP_ORX_100120_GUI_101720.doc
Size 156KB
Sample201017-w5e6xape2a
SHA256 08171ab9613c40f0cffda97d95d104eabd33aca151d19a4315b8e2ec2142fb63
MD5 71f0d5ed0f5e04f1f2ff7376b7bd8844
SHA1 e9f3d2de6e87f379878d04cdc3a1bee5eb2d352d
SHA512 3fb5c9577ca269b640f960883f0306da09ad9adacff5647d9a81ce87da791cf4644ce9334111c09c2e1e52f72c5421db108cdb9787d0c58893c4d94346a2dbcf
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

REP_ORX_100120_GUI_101720.doc

.doc 156KB

REP_ORX_100120_GUI_101720.doc

SHA256 08171ab9613c40f0cffda97d95d104eabd33aca151d19a4315b8e2ec2142fb63
MD5 71f0d5ed0f5e04f1f2ff7376b7bd8844
SHA1 e9f3d2de6e87f379878d04cdc3a1bee5eb2d352d
SHA512 3fb5c9577ca269b640f960883f0306da09ad9adacff5647d9a81ce87da791cf4644ce9334111c09c2e1e52f72c5421db108cdb9787d0c58893c4d94346a2dbcf
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro