1b8f5b13d79bd9de5c10dc79514ce51b | Triage

Sharing

General

Target

1b8f5b13d79bd9de5c10dc79514ce51b
Size

1.3MB
MD5

1b8f5b13d79bd9de5c10dc79514ce51b
SHA1

a23aeb990164016156951ab1707787122748c8e4
SHA256

eba7c89f492f23bb3cc86520cdd0463be93cdde7ce12674ddb2a109bb4b2bf5c
SHA512

c68026fef436aeed967d560740539417fd3e6603a9f34312bf86469947f5dc3beffae48e012958865825d73624274e39590444543f71e8a770ce4a0284d551e5
SSDEEP

24576:bEIZ4wA74D4SQKxZcy8gthDWs/chYusVNVQK0U/B89:b+wJD4QZh/qKKMn70uB8

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

1b8f5b13d79bd9de5c10dc79514ce51b
.doc windows office2003

ThisDocument

Module1

Module2

Module3