OmeksBlank[.]doc

Resubmissions

22-03-2021 07:45

Target

OmeksBlank.doc
Size

37KB
MD5

51f6b8678de15611bf15e7544dc87c87
SHA1

4d04e4490d3bb3590d94bb2dc8038011fadfbec4
SHA256

2966d4d96bf053a15a2665464327f3fd5165bd03587679452b1db4f3f03946e9
SHA512

fdef0c2194c02d39372f6c3e80ddfb27fa35700cda378af60073c017da30df5b8d8dadb022851edf777c69b84fd4e9a754c1fd823fae5408a3e795f2d2b930b0

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros