5c2e3b10b168cd078a9c2a3041becdc2 | Triage

Sharing

General

Target

5c2e3b10b168cd078a9c2a3041becdc2
Size

1.3MB
MD5

5c2e3b10b168cd078a9c2a3041becdc2
SHA1

6bf0c00f8778e38b51e7f6849ba28a42ab5076fe
SHA256

9bb0c418a926530eaa01c8fb31d4942c8154816f48e2a840c7e863cf317bdba4
SHA512

be3ea73ea6f6ac39a1105087791a1747bad7ebad9217d338f53204f93b01c90dfee1a48687c69c87f9bae3afabd14b1b9ca24147d2bbab316789e1b3ed4751af
SSDEEP

24576:/EIZ4wA74D4SQKxZcy8gthDWr/chYusVNVQK0U/X8z:/+wJD4QZh/qDKMn70uX8

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

5c2e3b10b168cd078a9c2a3041becdc2
.doc windows office2003

ThisDocument

Module1

Module2

Module3