XXXX[.]or[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XXXX.or.zip
Size

653KB
MD5

bc1aade7cde618407459e8ab3651817b
SHA1

7b003069b84a3351479eae4ed5fc6be0b5d0a4fa
SHA256

cc3d97f12d2122560f79ee36f6c465c2206dca865b5099e575d98661443335c3
SHA512

7a3125b4de5d6d18be0464076e53e6364f2a1f0b51f2c57800dc0cb4448b244aeca0e1629416c285b8a20e0a0338e950d2e73737927f808431a9f53913f076dc
SSDEEP

6144:aJNbwmfcuHom8Hz2f//ywiWT8xVTI5wqK:GbPHom8TYyCT8x5I5wr

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
static1/unpack001/65681938388709633__2023-08-03_0827.doc	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
static1/unpack001/65681938388709633__2023-08-03_0827.doc

Files

XXXX.or.zip
.zip
65681938388709633__2023-08-03_0827.doc
.doc windows office2003

ThisDocument

Module1