Beacon[.]doc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Beacon.doc
Size

46KB
MD5

3d862b2bb9cd8ccce4e3329a09d3da5f
SHA1

570acfe13f3bf37ff370ade08ddbb361fc2d840e
SHA256

21360cb095ead182c21d9203b9d619e6b57f1dacdfefa6b9499173f8c5e3adc5
SHA512

2e915c9a5a8feeedfe3b7df2a92d3ce6a92c958e59cd69c267cd640856dbab53368e2ac7fdb51f54e74678d7b4db0d171de86cbb125c3dbfd4674015eca0d66f
SSDEEP

384:9iSZfI/PKRQrOv4Sqm3y+peC/iNr6kzlkyzQ/EC560jHuOK0YtH:hAPo+Ov4Sxi+peCqNrdHWEFk7

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
sample	office_macro_on_action

Files

Beacon.doc
.doc windows office2003