c166ed4853474046c299c5374d2a791597e758fa9cce4a4fd08d2f9c3f018890[.]doc

General

Target

c166ed4853474046c299c5374d2a791597e758fa9cce4a4fd08d2f9c3f018890.doc
Size

239KB
MD5

28ed7acbf9cf3bec25a6b8c9b7b46e33
SHA1

0c139d079c5c78f782ea6b3fe3915f1364a6ba7f
SHA256

c166ed4853474046c299c5374d2a791597e758fa9cce4a4fd08d2f9c3f018890
SHA512

328d36b1f20c36f0f491b654023b86392c9b1761e349b40a02695462fcb88966d1e0376f630d3d44a74053d75b74e3a6fe4caf5fad79e9b5a96ae70da72b5006

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros