c054b53fb51e6e7b49769d79f4e7ef6c | Triage

Sharing

General

Target

c054b53fb51e6e7b49769d79f4e7ef6c
Size

1.3MB
MD5

c054b53fb51e6e7b49769d79f4e7ef6c
SHA1

10d9152380fd82ac7eca98f50b675ae37b35cb1c
SHA256

028cbc9522520565847ec9e384257be5be6fc4fb8dc06c48dec5b8a19e1bec70
SHA512

f0b13e9400de56ebbb647a0086902c81a49f0869cbc7c2a740119bf0d26d763e485b9a06f6ead6a298c7f9ad203ca7ede6c62274949cd361024ee73e284f8e3e
SSDEEP

24576:IEIZ4wA74D4SQKxZcy8gthDWf/chYusVNVQK0U/U8A:I+wJD4QZh/qXKMn70uU8

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

c054b53fb51e6e7b49769d79f4e7ef6c
.doc windows office2003

ThisDocument

Module1

Module2

Module3