BAL_KKR_100120_SNX_102120[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
BAL_KKR_100120_SNX_102120.doc
Size 198KB
Sample201021-dfcl593asx
SHA256 6d7d78e135f7db247a786da7df5ef99d0acbe8f8f5adf65b13be91bf87655279
MD5 6367e573f3e314ce781c0d22b74b573e
SHA1 2799c89b0f1afd80600647ea9f7544c2ee710a44
SHA512 7ca127df56f2b2c67e980dde302d9eb6a2ce590688353200b6058256b38ad933de1947a202b73902aad623c80a12024aed73b9b79a68d86da78cec0fd475e2f5
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

BAL_KKR_100120_SNX_102120.doc

.doc 198KB

BAL_KKR_100120_SNX_102120.doc

SHA256 6d7d78e135f7db247a786da7df5ef99d0acbe8f8f5adf65b13be91bf87655279
MD5 6367e573f3e314ce781c0d22b74b573e
SHA1 2799c89b0f1afd80600647ea9f7544c2ee710a44
SHA512 7ca127df56f2b2c67e980dde302d9eb6a2ce590688353200b6058256b38ad933de1947a202b73902aad623c80a12024aed73b9b79a68d86da78cec0fd475e2f5
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro