Purchase order[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Purchase order.doc
Size 69KB
Sample210316-exd4xy2rr6
SHA256 d60076d9ebcd69f0403422ebb01bf2df5faa59ce3fe2596b76ba0868ec666549
MD5 f0bbb85804a6759fe665b2482b6d083e
SHA1 0eba1c2a8877c96b1cda52a11ab2066124663e19
SHA512 cc0f3314ba4d01de4af012eac61033d686183b83b2ec6a674ff27248f72dbbe86f8f655460ec37385d6c3f6628f80928dcfaa0cbb135fa541b270b92b5591abf
MD5 SHA1 SHA512

Score

8^/10

macro xlm macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros
sample	office_macros

File Explorer

Purchase order.doc

.doc 69KB

Purchase order.doc

SHA256 d60076d9ebcd69f0403422ebb01bf2df5faa59ce3fe2596b76ba0868ec666549
MD5 f0bbb85804a6759fe665b2482b6d083e
SHA1 0eba1c2a8877c96b1cda52a11ab2066124663e19
SHA512 cc0f3314ba4d01de4af012eac61033d686183b83b2ec6a674ff27248f72dbbe86f8f655460ec37385d6c3f6628f80928dcfaa0cbb135fa541b270b92b5591abf
MD5 SHA1 SHA512

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action
Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm

ThisDocument