BIlls-8172135[.]doc

Resubmissions

14-10-2021 18:15

14-10-2021 17:51

14-10-2021 17:48

Target

BIlls-8172135.doc
Size

43KB
MD5

12489be76fc04c1226707d1029f834a8
SHA1

6aedf03afe4e5b7cb220d8541473243a9bd17179
SHA256

ccff267f5824ca8d8480b9050ff631681b3d7a0817241374cfa65fc7a3b58476
SHA512

1a7d7ddbc7f6da7e448ce83af6a3802c8e57bf1da8fe51e494e52c143ebda3759b0fbe044e1ecc394b02e3c7cba803ae2156dc781bb4242402bb8e58e55ee79b

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 2 IoCs

Office document equipped with 4.0 macros.

Processes:

resource	yara_rule
sample	office_xlm_macros
sample	office_macros