63aaf7e9b28cc5f9a48891e99256d866[.]docx[.]vir | Triage

Sharing

General

Target

63aaf7e9b28cc5f9a48891e99256d866.docx.vir
Size

12.5MB
MD5

63aaf7e9b28cc5f9a48891e99256d866
SHA1

c3524aac7885c96c8ef8badeeb6a28037d964dff
SHA256

d6273f528ad9fe35b2d8d46521359d5d19ff6c3fba44da01a1fd23796905be92
SHA512

7d60abf1e4b8010f88ea11dd04a5edca43a1d9743b23aa60fce2433ab47d1dd88d29a7b0c7881aa26124e4fd9c8e4818f82b741e946726fddc95689585d4e388
SSDEEP

393216:/V5fs31xJWdy3Qtg6iGJZvR7XCUhJe9h5:t56sygg6iodR2CJe

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Files

63aaf7e9b28cc5f9a48891e99256d866.docx.vir