A[.]rar | Triage

Sharing

Target

A.rar
Size

3.0MB
MD5

863bc8fe5e347b71fa56b17657999ab8
SHA1

7cb8f68159647957c27f5014d295ec48468fa039
SHA256

7714602b44e30e482f50789f308caf60998c93d667ada525934f104ec4bbf8a1
SHA512

90bc5ae6e82c097fedb07edec6b5291af63459f339a9334a265a1e289a6b1acfc50080da31f92b7acac7ecdf1a48ff6b031d8d7834ca94d7ec89cb859e89cd76
SSDEEP

49152:BW6wefnsMxOIHBGGYE4hmM9GlnHbavTGYtxzJ/3h5bdiZNHYtyWssbFPx:kofnlxpHEGYE4p9GlaCYvzJ/0HKNx

Score

8^/10

Office macro that triggers on suspicious action 2 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
static1/unpack001/1c1f3eaf142c53480147c6e98cea4547	office_macro_on_action
static1/unpack001/23e8349880dde570473345c8b6ba8d94	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

Processes:

resource
static1/unpack001/1c1f3eaf142c53480147c6e98cea4547