new order 001[.]pps | Triage

Sharing

General

Target

new order 001.pps
Size

113KB
MD5

6201df5c78c9638cc753b9d23b61e500
SHA1

28ff4b387e9da8e2eaf2f3dccfd8b0728b90adc3
SHA256

fbd1eaa637bf9ec6e7a77759026fab8c924114a1fbb5345534152746b6928431
SHA512

a03251cbeda811fd9ce7bdeadca0a8504a0de4069b996e297c7b2066a130f90feeed76223b35e0a0b23ff39d6951fdaf8637d9ce86ed7341c2cc26fce5026f4d

Score

8^/10

macro

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

new order 001.pps
.pps windows office2003

Module1