SCAN_6[.]zip | Triage

Sharing

General

Target

SCAN_6.zip
Size

727KB
MD5

20ab1790a33bee3702aad587ddb58d54
SHA1

2c457b41442a77bd77a8b4f9a0a934363b3ffe81
SHA256

b050bf9b5de98ad55d629b84f61bed976a9d7d44ab1e2a6a9a0541177798e48e
SHA512

07583fb470266bd2236a90a9b22501bbb40ccf2364aa5074af63f432c55348098058664cd90f098d452cbd12a289e6f4bef85bb31d35a12657b0a5813989ef3f
SSDEEP

6144:IwZnDlMy6O3qKmCRUe1B5uLqcHfVDNUV3nJGM+BTB:btDlb6IqXCRUe1BTcH8VIM+VB

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
static1/unpack001/SCAN_6.doc	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

static1/unpack001/SCAN_6.doc

Files

SCAN_6.zip
.zip
SCAN_6.doc
.doc windows office2003

ThisDocument

Module1