04_486[.]doc | Triage

Sharing

General

Target

04_486.doc
Size

533.3MB
MD5

fc7d564ec911a71972275055ecba4520
SHA1

350d4ace5bba7462534ee68dc1de32fe2f923a1d
SHA256

a459aaa98ce70d8a962a38f4376bdb76d82a6a3e8c1af621a34031aa0546201d
SHA512

15fe472529b1ea89091b4be12a588e14b307c8fae217e422ffe6eaa099088aea4f2d45a4821f3a6eb7e2a576426de07ee031e54fca3b99635a1a9d2ae81563e3
SSDEEP

6144:ip32/gDd0Nmt71wFmSWjfDrV8YQnZocbyrX4NqclWL9:ip32SEmtJwFmhjfPtrXqqyW

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

04_486.doc
.doc windows office2003

ThisDocument

Module1