emotet_e2_3db3bba8b8ca33c0e549a0903a75ff84243f83de0e5b3a86a338887689652972_2021-01-22__163355295369[.]_doc | Triage

Sharing

General

Target

emotet_e2_3db3bba8b8ca33c0e549a0903a75ff84243f83de0e5b3a86a338887689652972_2021-01-22__163355295369._doc
Size

172KB
MD5

3879220b7caff47c0fcad48f4e6f40cd
SHA1

162674ec5b1fd17412041df76e5d6e69770376aa
SHA256

3db3bba8b8ca33c0e549a0903a75ff84243f83de0e5b3a86a338887689652972
SHA512

f6b016a116b5daa23d395dc2281fb25cab1c4fcc36114636bf8295a992c2d90f6f7445c30c54d3ed27a82a84b846f4cbc5a57e956711807be8377f10871e974d

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros

Files

emotet_e2_3db3bba8b8ca33c0e549a0903a75ff84243f83de0e5b3a86a338887689652972_2021-01-22__163355295369._doc
.doc windows office2003

Tvh1u8793dltn9

Twh1gb2mpd3

X1bqz0qaer43b52bf