General

  • Target

    1word.doc

  • Size

    83KB

  • MD5

    b6afd4807d29af381fa6cbed424d1ce0

  • SHA1

    813cababa9d6b320f6d2a38585ca66e2aa26f35a

  • SHA256

    fb96123b8b509bb1631e015f97404d33a56652c006fbe0ccf27e4f19ed7da235

  • SHA512

    37552d005cb9e8d70c349fbeaf02fd3e3ed09bb7d20da4c30ee18a1d77f7d9638042115374a0585e8b7b4a95fa20d54e8799644439b4cfc07b295abea07c9519

  • SSDEEP

    1536:NRAaBAXtW7uGQltwJA1tqCOowfA660NY4EOTJ3WlTsIopOiszlK:57uGy+EqCeA6dY4EO1Q2D

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1word.doc
    .zip

    Password: S1P@ssw0rd

  • Device/HarddiskVolume3/Users/User1/Desktop/LetsDefend/SOC109 - Emotet Malware Detected/1word.doc
    .doc windows office2003

    Wzgjn0mugfbylm

    Fnsu6o7ee8me

  • manifest.json