QPL_0600_310107725[.]doc

General

Target

QPL_0600_310107725.doc
Size

28KB
MD5

38aa23ee6f3164562c75b9584ddd8bf7
SHA1

75982c488ae86664e2b3420fbfec12bd22e75b81
SHA256

ce0784a0d4e7afe62964a890c549c42743fa1cc5d9bf78204a225c9bd2e3b2c6
SHA512

f3283f73453c014e7d45aa2e96db6f2e6241c498683d146ca41cf323e9a3a7d616dcefba78778bdb13e3d26dd9e12d3feb22841e0779a6322d1af05a76f58623

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros