9b28f78ebb97bc88b473fb92cafd03ef | Triage

Sharing

General

Target

9b28f78ebb97bc88b473fb92cafd03ef
Size

1.3MB
MD5

9b28f78ebb97bc88b473fb92cafd03ef
SHA1

345524df277ae83f974dbb121b01b571b7d7f528
SHA256

da8996a9e24fb4286a984cb02a21b613232ba9afcaaa0949d18d4ca11d08ccf1
SHA512

03dbff5c4d8b1038de19beb2878b2d76c344a75a4eb844914770b866974566fc9addc1e30bd18939b8663f51c924108353524eacb0772db29cb9e944de723788
SSDEEP

24576:mEIZ4wA74D4SQKxZcy8gthDW4/chYusVNVQK0U/S8mB:m+wJD4QZh/qWKMn70uS8K

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

9b28f78ebb97bc88b473fb92cafd03ef
.doc windows office2003

ThisDocument

Module1

Module2

Module3