Suspicous Activity List[.]doc | Triage

Sharing

General

Target

Suspicous Activity List.doc
Size

44KB
MD5

8abee1174c3552f9a31bff39131ecdcb
SHA1

d8b4906286fb67929db435bf68603492416b8f87
SHA256

1a0dbaef78cc34c9d60972aec1f89e20ea9cbddad07ce897a2552a719919d8db
SHA512

477fec74038e520d2278f68b7e1416dd8f9aaae0bbaa2e82bb9956498702fdbb170ed415ee64e15b1a09433cde56312ded8c66cb24f5eee21f5d20ef66c63b0f
SSDEEP

768:Um6u9Yg1aM3yBXL2DNxz99pUFaEWy4RVKb:Uu+gbyBXaDN3DUFaE

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

Suspicous Activity List.doc
.doc windows office2003

ThisDocument

NewMacros