0224_8933018407944[.]doc

General

Target

0224_8933018407944.doc
Size

342KB
MD5

19c828daf23a690433f66c8987f36e0f
SHA1

7d066391f133d9d38d22770c0b6a9c83aa4d3299
SHA256

fb6012d83458227eb8b3ba682e54fa2acf3b1d61541dc288414d9e8c0e569de5
SHA512

ab2cde2d13634c85991bce4e61a7fa7da136b1268fc8e60b65784dfaca8d8e6d10ab870a97c84bfca7940fa3c773d6e96d0f7d44b2688c5041d243b496e99614

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros