Sirishak[.]NET(Resume)[.] (3)[.]doc

General

Target

Sirishak.NET(Resume). (3).doc
Size

136KB
MD5

b686e92241f4b70c16b2ca99831794e3
SHA1

ec87ec62fb57bb6ac23e8d8ce336c0f781895649
SHA256

25e48e16c30bcd004583ce8efebc95ab732f81538b622ef056295514c7a5656a
SHA512

e212e34d5620e7dc03a641695f35bac01da0489ac930d000f9e752ec0ab98ddae98151c0d859e1d89a743985298c87a90f29b5edf54a57f8e6337a208909988d
SSDEEP

1536:ItaDMRVNx3mOkx3/VtMmG29fqu7zA9/8GDAlHX0+DQtSxrt/skogUot/gUEAkYUP:IawRVN43RV9Git6I

Score

8^/10

macro xlm

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro xlm

Processes:

resource yara_rule

sample office_xlm_macros

resource	yara_rule
sample	office_xlm_macros

Document created with cracked Office version 1 IoCs

Office document contains Grizli777 string known to be caused by using a cracked version of the software.

Processes:

resource	yara_rule
sample	grizli777_cracked_office