Payment status[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Payment status.doc
Size 175KB
Sample201020-lrmwddca5a
SHA256 bc671ede4242e59e050fff534673dd447ebcdb084f7e7504d004ca446707d409
MD5 37ec0396e0ccb38ff2d38cf860b475eb
SHA1 e21e3a40692d07a57691c59b34d298ee46277c8f
SHA512 e58493d397eeb45c5a20feb94fbcca3b82f15e540fc92d8fc09c74a9654fc9df61399f8f2ffa9e50d6261a9a1ecbf65131c8b697e7bde17042057002919c106c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Payment status.doc

.doc 175KB

Payment status.doc

SHA256 bc671ede4242e59e050fff534673dd447ebcdb084f7e7504d004ca446707d409
MD5 37ec0396e0ccb38ff2d38cf860b475eb
SHA1 e21e3a40692d07a57691c59b34d298ee46277c8f
SHA512 e58493d397eeb45c5a20feb94fbcca3b82f15e540fc92d8fc09c74a9654fc9df61399f8f2ffa9e50d6261a9a1ecbf65131c8b697e7bde17042057002919c106c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro