ST_Heodo_ST_2020-12-23_14-33-55-679[.]eml_20201222Bestellung[.]doc_analyze[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ST_Heodo_ST_2020-12-23_14-33-55-679.eml_20201222Bestellung.doc_analyze.doc
Size 201KB
Sample201223-wxmtbjee3x
SHA256 c82a0e45b95cb15c63934dcd23f35800ec4e3af4a137e4f267a1f6e8e5a78ef3
MD5 9a96a1df63454bd827396b2755f12b08
SHA1 5fda21698d62658dfcb5c004512840a6e038179b
SHA512 bb50d069411745e176b52bb91c4ddff3731248c95a223242db444e90a46883556de1918eace2661c1908fd0d35dcaf04c5da7bbe7f1e735eebe79686e03e5a54
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

ST_Heodo_ST_2020-12-23_14-33-55-679.eml_20201222Bestellung.doc_analyze.doc

.doc 201KB

ST_Heodo_ST_2020-12-23_14-33-55-679.eml_20201222Bestellung.doc_analyze.doc

SHA256 c82a0e45b95cb15c63934dcd23f35800ec4e3af4a137e4f267a1f6e8e5a78ef3
MD5 9a96a1df63454bd827396b2755f12b08
SHA1 5fda21698d62658dfcb5c004512840a6e038179b
SHA512 bb50d069411745e176b52bb91c4ddff3731248c95a223242db444e90a46883556de1918eace2661c1908fd0d35dcaf04c5da7bbe7f1e735eebe79686e03e5a54
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Orstan_0f0m5t5

UserForm1

UserForm2

UserForm3

UserForm4

UserForm5

Chiin3eu9vv5ivi1ck

Jwvk8ba2sy2s