pack 3[.]doc | Triage

Sharing

General

Target

pack 3.doc
Size

542.4MB
MD5

d2a292811a673f3744c7367317e8f6eb
SHA1

5d3f9f36e8a670c79c8ce4a1320334af3b168ca7
SHA256

e43da9219043459d007a5badc581a8784c296318c21c355ada1ba457fdc2bb49
SHA512

a5d7f539975138a7e18aae640ec1322ffa653a8e7028fb0ad478ae6185f259689d7f2aeb4e50e224c5789264e0562b26a9866e0630f3ad07d8153673ccff888d
SSDEEP

6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

pack 3.doc
.doc windows office2003

ThisDocument

Module1