Dat - 1348 22 Dezember 2020[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Dat - 1348 22 Dezember 2020.doc
Size 201KB
Sample201224-hlynh9l6ea
SHA256 e1757b0f0980cca2afdf7bf366e1ae85afc7d2608565aa49c3581be6c7722244
MD5 537f2433afcb61a5a4cc0089ed063797
SHA1 34e16e4fe3839192b1265b63f6cac6e00be334a6
SHA512 c016871100c430c22c5538a37adcc328b9db6d7bbe16058f9962f3cff9679d87f50b85ba472c265d1836d4f7ee5fa07b3fc39d9fad68a02e77e2e4a81acd04a0
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

Dat - 1348 22 Dezember 2020.doc

.doc 201KB

Dat - 1348 22 Dezember 2020.doc

SHA256 e1757b0f0980cca2afdf7bf366e1ae85afc7d2608565aa49c3581be6c7722244
MD5 537f2433afcb61a5a4cc0089ed063797
SHA1 34e16e4fe3839192b1265b63f6cac6e00be334a6
SHA512 c016871100c430c22c5538a37adcc328b9db6d7bbe16058f9962f3cff9679d87f50b85ba472c265d1836d4f7ee5fa07b3fc39d9fad68a02e77e2e4a81acd04a0
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

Orstan_0f0m5t5

UserForm1

UserForm2

UserForm3

UserForm4

UserForm5

Chiin3eu9vv5ivi1ck

Jwvk8ba2sy2s