REP_SFE_100120_RNQ_102120[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
REP_SFE_100120_RNQ_102120.doc
Size 199KB
Sample201021-tc4tkdrl1x
SHA256 a2767289b35cab514b56d67ba9c1c02f16035f42f8a1f65307e71cf9d9175206
MD5 3660c029f47a317b445a0aaf8dbc4025
SHA1 494c0089b62e2077e3c0cd2eb17013bb8dd7dce2
SHA512 c83e0a80dd4b07fa3234d2f93189b7bd142dc264900fbe68907df160e6d1d97011636fac3cfcfc1598b8e2bdf9bb12074fdb968d155eedf4e1dd3e6ba9136e11
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

REP_SFE_100120_RNQ_102120.doc

.doc 199KB

REP_SFE_100120_RNQ_102120.doc

SHA256 a2767289b35cab514b56d67ba9c1c02f16035f42f8a1f65307e71cf9d9175206
MD5 3660c029f47a317b445a0aaf8dbc4025
SHA1 494c0089b62e2077e3c0cd2eb17013bb8dd7dce2
SHA512 c83e0a80dd4b07fa3234d2f93189b7bd142dc264900fbe68907df160e6d1d97011636fac3cfcfc1598b8e2bdf9bb12074fdb968d155eedf4e1dd3e6ba9136e11
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro