580_0[.]doc | Triage

Sharing

General

Target

580_0.doc
Size

503.4MB
MD5

dd5d561c7b507f6bbcdb6d11ce96b711
SHA1

ef03fc14fd594bf6b642c98e1bb9233936b55aae
SHA256

3a4b55f2f19da924ee1e96838c4a7fea5c7ce15e962abc89b74ddea6cab45524
SHA512

43a372f849a3f2ded2780f4ce391ade7942310ca204b1648f3c9ebd526cc405a2d316cef7561238070d8eac34ee4a814db4cf2071cfca91a3a89222a8b7d3ca8
SSDEEP

6144:zZRtBPT4N/uQaNULlPUvauNTklB7ShcbYdFf8UOPv:zZvJhfKd2amwYdKUq

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

580_0.doc
.doc windows office2003

ThisDocument

Module1