20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a

General

Target
20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a
Size 486KB
Sample220130-tgctjadffp
SHA256 20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a
MD5 e061670462a35bb5f46803394f9ca733
SHA1 98f2431930d74308ac5f2cc0168ce5c0d7c23eb9
SHA512 2378759e4e4b98631f3b0179aa9c08082dca95c9ef12946b201de26f2ce827c21fa2f5f078211553dc6ce5c2513be2bcd75557ebd2bb3c35486fc1d957452e7b
SSDEEP 6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHO:n
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

SHA256 20da161f0174d2867d2a296d4e2a8ebd2f0c513165de6f2a6f455abcecf78f2a
MD5 e061670462a35bb5f46803394f9ca733
SHA1 98f2431930d74308ac5f2cc0168ce5c0d7c23eb9
SHA512 2378759e4e4b98631f3b0179aa9c08082dca95c9ef12946b201de26f2ce827c21fa2f5f078211553dc6ce5c2513be2bcd75557ebd2bb3c35486fc1d957452e7b
SSDEEP 6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHO:n
MD5 SHA1 SHA512 SSDEEP

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action