MES-17032023[.]doc | Triage

Sharing

General

Target

MES-17032023.doc
Size

501.4MB
MD5

1ee8a9746ce0e7b98c9993f37248efe6
SHA1

1a4e26d1ff262b04bcc982ed8de8d7e461aea87d
SHA256

da66440788b21906500a6f4c8df55a5a80d4ae07ac70563bd9037958915acce1
SHA512

e20d5762cccfc86791749b27fa5fa486571853ff106b2213e4ec518e57b706aeb752e2ee99a299e148e253acd5394124755e2731ca7c743acaf73dd78f4ad88e
SSDEEP

6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

MES-17032023.doc
.doc windows office2003

ThisDocument

Module1