Kk-echo[.]doc | Triage

Sharing

General

Target

Kk-echo.doc
Size

207KB
MD5

e2b2e81d94600338e279924278a3e0c4
SHA1

1ea91cf8ae8087f1c81c012a4346fc8079720a3e
SHA256

a14a4a807c275b98eff724f72358fcac4790d9bad735667efb271ad339fcddac
SHA512

f4ce8868b3cf604b78ccb6c9bcf00ba2078d63272aab6d327e78df2e19fb533c436df9b6f9437cde0a4a62ef6eeed966f6a56c7803c2f603642c750c6aebc47c
SSDEEP

3072:qjaqgJKlkOLyO1k7df0r56kgJOpI8wffI/0GQFrjhfcl4kbo:q7kOLd1k7df0rMkgJb8wfg/Wrebbo

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Kk-echo.doc
.doc windows office2003

ThisDocument

Module1