MES 09389[.]doc | Triage

Sharing

General

Target

MES 09389.doc
Size

527.3MB
MD5

9812e2e9d12e0c2e91fd48010c460be2
SHA1

7719a519d0abc227a34927c7f3318f593da53aa5
SHA256

2a55a403f32b632f999e7c57402c760b6f75236a31d91dd635a72bee7326c08d
SHA512

606200c860db6776dcc3ca1a908c56dc36100ac8ba3cf66517500f4fb4b270c1f9efdae44276b1d23ae099e7a36fb9b2484a257d5038b1e18923973e24105f30
SSDEEP

6144:ip32/gDd0Nmt71wFmSWjfDrV8YQnZocbyrX4NqclWL9:ip32SEmtJwFmhjfPtrXqqyW

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

MES 09389.doc
.doc windows office2003

ThisDocument

Module1