emotet_e2_91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6f_2021-01-13__064815743820[.]_doc | Triage

Sharing

General

Target

emotet_e2_91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6f_2021-01-13__064815743820._doc
Size

158KB
MD5

d4deb7257d71cabb2941400792bdc300
SHA1

50a82120a40be6649deec1700f912a07cd26c2d1
SHA256

91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6f
SHA512

5bf850d1e1c5826683aa83b8999d34dbb2c8a3795c52bb24099d77323c543896ae2fb700c06a4f5aa813189adefd495fc8eda67bb9f67b8aac682304cadf24d8

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

emotet_e2_91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6f_2021-01-13__064815743820._doc
.doc windows office2003

Rw_gu6fr25wcs

Rkhqpdwb_l8se

Qsfjcxgtaymuqu25a