2023-03-08_1025[.]doc | Triage

Sharing

General

Target

2023-03-08_1025.doc
Size

537.3MB
MD5

183aff7571708bfe62f6fa5970f9291e
SHA1

6e4cf58ed7fa40754f7cca2cb59d8342f47d5b4d
SHA256

a4cc1fff6eae705fab7fe91be559831ca6d55c604897edaeef099a7d9598dd42
SHA512

44c59f2d3178c3ffe0a3ae196cb8a12645e8ab81b4f40260622c6a7e5017840faca522ecc7ad6092e61af4996ce60f7e33121dcb2fae6e80343186435e3b1e30
SSDEEP

6144:xPn4VZXbatu7MDogsDkHS50LdfcGcbz1f5M9KTFrMpSlMK3Ru+Q28:xP4PbNMkgg3Ru+x

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

2023-03-08_1025.doc
.doc windows office2003

ThisDocument

Module1