3f6d780eee13390c19d15d309a85f512091bc469350023b075a7b5b88ceddc4d

General

Target

3f6d780eee13390c19d15d309a85f512091bc469350023b075a7b5b88ceddc4d
Size

24KB
MD5

12a329ec30a90b57ad5d65261a03038c
SHA1

e58c4856ffc75c2f9cbf757c4d9058342e4cedad
SHA256

3f6d780eee13390c19d15d309a85f512091bc469350023b075a7b5b88ceddc4d
SHA512

4a03474ea1d179ec004e3861668fff0997e5bbbf9d22274aa139d1d1f975f61f5159aea9d5b9442d63dba6740902c27fc21981c35148859ad43ee3d2041c3207
SSDEEP

192:HHa439gyLPUVo/X/X/R/4telQdDUUmgIInvh52+faQv7Z5m8Hae:yovvZgkcUUcInp52+faonp

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro xlm

Processes:

resource yara_rule

sample office_xlm_macros

resource	yara_rule
sample	office_xlm_macros