48463e9423607e7e5fbb05b42a3bc4ae | Triage

Sharing

General

Target

48463e9423607e7e5fbb05b42a3bc4ae
Size

623KB
MD5

48463e9423607e7e5fbb05b42a3bc4ae
SHA1

922f69f07b42322123a3ff3f8f6e63277d0deb70
SHA256

cef7ccf63ab0648d312c44000f29f93d672e6a99a8ab5d08b599719d3f2ac23d
SHA512

8e61c966467e0c4cf1edce45f25a43464d59f156c958c66169af4fbe6214e7ca6510995f5f8167ebca30813f70246d5164d1b77e6bc83b3255946780fc345bc8
SSDEEP

12288:zV9iQsDr8NREUYfwg8I3HMzNK3Rb+jC4xU4WhO:zVXkr8N+UYhR3HMBK3RMeO

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource

sample

Files

48463e9423607e7e5fbb05b42a3bc4ae
.doc windows office2003

ThisDocument

Module1

Module3

Module123345