emotet_e2_6b2fbb5e14a3a1018e7cbf6b37d303d86504f0fc412e8d0f0db3100162bfdd0b_2021-01-22__153132011351[.]_doc | Triage

Sharing

General

Target

emotet_e2_6b2fbb5e14a3a1018e7cbf6b37d303d86504f0fc412e8d0f0db3100162bfdd0b_2021-01-22__153132011351._doc
Size

171KB
MD5

91b2f79e869cab064795bbe6c52355c6
SHA1

577eae501a5d0c4101abbacc2e46cb8362de0829
SHA256

6b2fbb5e14a3a1018e7cbf6b37d303d86504f0fc412e8d0f0db3100162bfdd0b
SHA512

05f7be85d8575c16c497c7709f8516baaa54bc7d7e8761077f872bb230b878b9efa7b596e5508a698b8bdc6dfe5b16be3c3c51f9018a1936963a2f07834603d4

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros

Files

emotet_e2_6b2fbb5e14a3a1018e7cbf6b37d303d86504f0fc412e8d0f0db3100162bfdd0b_2021-01-22__153132011351._doc
.doc windows office2003

Tvh1u8793dltn9

Twh1gb2mpd3

X1bqz0qaer43b52bf