SecureMessage[.]doc

General

Target

SecureMessage.doc
Size

82KB
MD5

b6bf42a76eb8cea70cb0a9ba2b8f31d5
SHA1

fc27036fefb683e218140e1f0af78f23d711a866
SHA256

3d808601a47c9ae6c1c121a5eb3297ebb8a75f3663cc425f92fc541b90c8200e
SHA512

8c0d9633420537bc3c8c16114959fd9648a31f7ca1fab536a67cd0ca6acb039769f9b0a4845679f32616dcbf16e1efbe6bbed9a53be43dc35cf5a06017e847e0

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros