INV207537 130121[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
INV207537 130121.doc
Size 159KB
Sample210113-e4clf7wh5x
SHA256 5b6fda6bc66117f2cc1231e6e18c675988cc1250ae547a8c193cd1ed5869bc03
MD5 d904dcff569da842a2774940ba27d4ef
SHA1 6c3beac50fb642123dfdcdc6633470bdc23af278
SHA512 73d1e34467472f90d6d88cfac0199dcab1eac4d489f09783b30d49d4e8bcfa078dd74646ab4cefd753ba95b8abfbe4de61307a0500ec97b1a8ab247b2ac85087
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

INV207537 130121.doc

.doc 159KB

INV207537 130121.doc

SHA256 5b6fda6bc66117f2cc1231e6e18c675988cc1250ae547a8c193cd1ed5869bc03
MD5 d904dcff569da842a2774940ba27d4ef
SHA1 6c3beac50fb642123dfdcdc6633470bdc23af278
SHA512 73d1e34467472f90d6d88cfac0199dcab1eac4d489f09783b30d49d4e8bcfa078dd74646ab4cefd753ba95b8abfbe4de61307a0500ec97b1a8ab247b2ac85087
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro

X9tclg9ve_1s

Q_iptwdi0mzmdqf_cb

Tr2_cmm4klb2