emotet_e2_1bb0e863fbfd980c0278f394d12e3557eb6460cdc059dd1d04e91e3d69ec688c_2021-01-22__151834282632[.]_doc | Triage

Sharing

General

Target

emotet_e2_1bb0e863fbfd980c0278f394d12e3557eb6460cdc059dd1d04e91e3d69ec688c_2021-01-22__151834282632._doc
Size

173KB
MD5

85ee61cd71160737dc548356abe08944
SHA1

34a9353e09bd63e42b6bd942618ddfaf48748020
SHA256

1bb0e863fbfd980c0278f394d12e3557eb6460cdc059dd1d04e91e3d69ec688c
SHA512

ca3fa19c5bac8572e2980cb807833abd8c71ea2b3918017d9f7f9003df0e62c623ee6a089d6901d1f4082fcd51bd42b597b3a9bdaf4477cae0242c3f1f024316

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros

Files

emotet_e2_1bb0e863fbfd980c0278f394d12e3557eb6460cdc059dd1d04e91e3d69ec688c_2021-01-22__151834282632._doc
.doc windows office2003

Tvh1u8793dltn9

Twh1gb2mpd3

X1bqz0qaer43b52bf