2023-03-22_0821[.]doc | Triage

Sharing

General

Target

2023-03-22_0821.doc
Size

229KB
MD5

d16fb990f2db97fdf879610ade214aed
SHA1

dbd20110ac267dc54d93b73e4abadef995a87411
SHA256

828a308d7e541fb96aa897cb5e0cbf35dee1b7d9df9556a1a3b8486954714c2b
SHA512

5923811a7d86bb5dc59ab07aa791dfc131512012e45fbb2c26eee751e23426c66f33f7bc4a3c34a4ca2340a7ab90fd868c6711dcfbf60218cfea68fb88ec0982
SSDEEP

3072:Z3KeWtsWzAhUDz4+1ka6+31RsoF7OSg8TnSjetGFah:ZKeRCmolJhh

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

2023-03-22_0821.doc
.doc windows office2003

ThisDocument

Module1