message 589[.]doc | Triage

Sharing

General

Target

message 589.doc
Size

546.4MB
MD5

4fe50b64bd6a9fe2a2baaacd7d388b96
SHA1

f9b91b27bf6cd5bf5d71f4fa721b240db6a09380
SHA256

e6e06d8eeddfdb0d2785232274f2548e4a8699043818e1671a4bcdc9fc5cff02
SHA512

a35b2b6d20f3c127b8a912523b3a308fdd3797cbddb0984e18132ac4afc58687898404b0b052057ec9c1d8b1a7c97174fa30d5c276953d3ffb6f69afc4a8e14c
SSDEEP

6144:NeWM86RZzwTFQR9jD77fyO0XwBh12DD2JfCFFyinWLqcRJ:EWnE8FQvTfx0XwBz4D0aFjM

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

message 589.doc
.doc windows office2003

ThisDocument

Module1