EFI_01037508200[.]doc

General

Target

EFI_01037508200.doc
Size

387KB
MD5

21ebc4527aecb50fc3adc65b610d3653
SHA1

3cf5df8b2e1e670ea2c85eec6f048d0c889bd715
SHA256

ea26039022e9c98e3d40700610f8c28f7d2b1d5f11394e0e22f2a40bf876ea31
SHA512

07fca5507656fd96ca707c6c88f5b139d3f638e313c465b677f448be769606794ca48fe6018ddc80ee4477035f6713e2c5053077f5465e39247a4f8b33e568fc

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros