2023-03-22_0820[.]doc | Triage

Sharing

General

Target

2023-03-22_0820.doc
Size

207KB
MD5

ca35c5ec8c75acc2c9ba7c19076ade0d
SHA1

ca31df8e4d94ed1d9648f103462f11988e87e77b
SHA256

f72c3339a6ce6a8ba0fe430773d99e890d19d54357d14e838501bfea0b1cb2f1
SHA512

6b51039c707b2f89f495d94b49c2cb3d57132bc333933687e3e7c598aa2b6ee9132c6e4863b92f52ac78227e6e515b8ee0bc6a414e2e2f5aa06f499dfa0da218
SSDEEP

3072:r43Tj6XFk1R81XNvvMGSsLyVwy+WNX3pMwwrnYD5LPfF:r43T2N++WF3KfrYD5LPfF

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

2023-03-22_0820.doc
.doc windows office2003

ThisDocument

Module1