Doc-46771529, MX[.]doc | Triage

Sharing

General

Target

Doc-46771529, MX.doc
Size

515.2MB
MD5

acb9494e9dd6cb5027470040b415ab08
SHA1

bacb7ccd4bca7654d2d47c5b5a78ec29c40871d8
SHA256

209df91aee0f1bf760ffb4ed61b59402a14bf9d721f671ba487863be403e5083
SHA512

20086d852d92e447d7a53a28c0031d826bf293aa25bbc9ce128f894edb1a6525da418cb0059d18f86f6ad5bd04c49ed8c4ca8943d1b480cf61a86c49a448c015
SSDEEP

3072:vpt3LDPYvrTr3jvZNWGBStinoLVMcXyHtt5YC7EGIuGEMYDDK6:H3AvrTPRUGpmpXqWCoGIuGEMY

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Doc-46771529, MX.doc
.doc windows office2003

ThisDocument

Module1