DOCX9-29827[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DOCX9-29827.doc
Size 160KB
Sample201221-6wkvcqajca
SHA256 5c2eb5bb1ad7637e95d3f9a48a34ca84fc39ead486c71dc34bae929f7f848831
MD5 2529be6d0d4a4d7bfda6968d45dcca51
SHA1 41fc6f87aac038840d09086480c9175a56b86189
SHA512 7a9fd7526ffe56b72a819a28b8d1aeedcbdbd7a5808b5aa97a486ee67c2a1ac8a3ed298270751bced1394acd69ff9df904bd6d9479393fdf8e44e67ccab5e858
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

DOCX9-29827.doc

.doc 160KB

DOCX9-29827.doc

SHA256 5c2eb5bb1ad7637e95d3f9a48a34ca84fc39ead486c71dc34bae929f7f848831
MD5 2529be6d0d4a4d7bfda6968d45dcca51
SHA1 41fc6f87aac038840d09086480c9175a56b86189
SHA512 7a9fd7526ffe56b72a819a28b8d1aeedcbdbd7a5808b5aa97a486ee67c2a1ac8a3ed298270751bced1394acd69ff9df904bd6d9479393fdf8e44e67ccab5e858
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Buh0u80jztxd

UserForm1

UserForm2

UserForm3

UserForm4

UserForm5

A11xrmql2vibgmly00

Gglfhyjwu9b6