3861_97384[.]doc | Triage

Sharing

General

Target

3861_97384.doc
Size

534.4MB
MD5

cf3838fc76086249c9c58b7112739152
SHA1

42461186f63f10eeaba8979339c536b83668afbe
SHA256

ecb30e7fe7b8c6c8267be45cfaea5adb0d1954f116d7cc57400b21027ff16585
SHA512

0b89a5a81eac54728b8b88a99d7b049fd2881da4a8740f6fb3ad144488f86666764e069864c18b969a81c840322bab70cb17b5629bdf6ec2b69109621488b60f
SSDEEP

6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

3861_97384.doc
.doc windows office2003

ThisDocument

Module1