K3362p2954[.]doc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
K3362p2954.doc
Size 943KB
Sample220321-vctrxsheek
SHA256 7f19bc8eb8f0555986de478bc9a17a8e052f4a9262b0a19b924d8e9c66a01ca7
MD5 2549fdb48c76b7dacf0dc369e4c7e8db
SHA1 75036cb314bb9f1d38f600a795fdf1bbfb14568f
SHA512 b6d7a80134bfc343fa0157e38c82e99b19115942ad3253c86ebe99de8ec33a9ceb782553a8ea7241962d750530d36316c7577980c1052f012cb06716de5b8020
MD5 SHA1 SHA512

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
sample

File Explorer

K3362p2954.doc

.doc 943KB

K3362p2954.doc

SHA256 7f19bc8eb8f0555986de478bc9a17a8e052f4a9262b0a19b924d8e9c66a01ca7
MD5 2549fdb48c76b7dacf0dc369e4c7e8db
SHA1 75036cb314bb9f1d38f600a795fdf1bbfb14568f
SHA512 b6d7a80134bfc343fa0157e38c82e99b19115942ad3253c86ebe99de8ec33a9ceb782553a8ea7241962d750530d36316c7577980c1052f012cb06716de5b8020
MD5 SHA1 SHA512

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action
Suspicious Office macro

Office document equipped with macros.

macro

ThisDocument

Module2

Module1