SCAN_704[.]doc | Triage

Sharing

General

Target

SCAN_704.doc
Size

539.3MB
MD5

611b3017ce676491ad9313fcfaadc0b8
SHA1

75736c632c339532414f721ea2a1c44075e53734
SHA256

882fa5f71902181ce1bc015c26033d9d1de708d393212b2d3bdcf42d1bf0d412
SHA512

02f47bacd6004b99f67ebcd75f050d74dcb46e5ebc60a7d5490365425d33f55875ea48dd00af125274fa380d5d18c9db373d62bf8eecc4be7dcd878a9b621225
SSDEEP

6144:ip32/gDd0Nmt71wFmSWjfDrV8YQnZocbyrX4NqclWL9:ip32SEmtJwFmhjfPtrXqqyW

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

SCAN_704.doc
.doc windows office2003

ThisDocument

Module1