Message_1703[.]doc | Triage

Sharing

General

Target

Message_1703.doc
Size

516.4MB
MD5

27217dc7491a19cb456cec0b80dd4070
SHA1

d3df2a5600d677cb6547fe0e9eae8cc5e055b575
SHA256

53207c58f6fc4a7674c21555684453831e02bbe902207b2fc114ab08e9fead34
SHA512

f883b8ddfd535a5976f7362b14ce4bd1dc88b1520ae8d8628dc23d948941fca33d42db7f59f728ec721508f148d621315f0326a8e1a2b87268745836d437bd98
SSDEEP

6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Message_1703.doc
.doc windows office2003

ThisDocument

Module1