0224_13930141056302[.]doc

General

Target

0224_13930141056302.doc
Size

342KB
MD5

b6ede47bc6f6d0585ae4f49b05a1bcbd
SHA1

a7517e6165c427719dfe680a4aaf7640859070dc
SHA256

5da3261145ee75979a781985d628d66637b0552e4fe0a52b4875ac21717a212f
SHA512

6259858805166b9506d56db0cbd1e3891a6c41377cdc1b629a4376298bc0bdc4cdacac00820ffa77e476c2e175c07f630f03623670e5af56958c4d5cd8110221

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros