0224_80188103030762[.]doc

General

Target

0224_80188103030762.doc
Size

342KB
MD5

7fc5aa5b2e8ce00bb672ad56a71651c0
SHA1

2f51502b91b341cd7d0796d6abcc859658efbcfa
SHA256

b82d2b0e5100db95cc6cfb9e88d42e4141bb7da4836d0ba7733b30e9bbc4e47d
SHA512

233fe8fbcf2e3d88d353d0aa8a3387904b86f4e064d303aef11ca7b22a84cec308b8d27f8adc19580a080414e4148138495b3a32658ab9f0c106df41e2e68ea1

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros