APT28DecoyDocument[.]doc

General

Target
APT28DecoyDocument.doc
Size 333KB
Sample240325-1etslahg84
SHA256 c4be15f9ccfecf7a463f3b1d4a17e7b4f95de939e057662c3f97b52f7fa3c52f
MD5 085be1b8b8f3e90be00f6a3bcea2879f
SHA1 cc7607015cd7a1a4452acd3d87adabdd7e005bd7
SHA512 9d61f7fcf4543ca2e9d282df93fa604a1736a5a50da47e7c66ecaa635465fef61b26c94af5f6204601668e646b6a140f0e248e01ad79fce056b671a3f6d8c6af
SSDEEP 6144:yaZ5a2auBso4RCTS8I7Dh4tkX7rETf1I3pS:35a2bBso6qGf7AT9I3pS
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

SHA256 c4be15f9ccfecf7a463f3b1d4a17e7b4f95de939e057662c3f97b52f7fa3c52f
MD5 085be1b8b8f3e90be00f6a3bcea2879f
SHA1 cc7607015cd7a1a4452acd3d87adabdd7e005bd7
SHA512 9d61f7fcf4543ca2e9d282df93fa604a1736a5a50da47e7c66ecaa635465fef61b26c94af5f6204601668e646b6a140f0e248e01ad79fce056b671a3f6d8c6af
SSDEEP 6144:yaZ5a2auBso4RCTS8I7Dh4tkX7rETf1I3pS:35a2bBso6qGf7AT9I3pS
MD5 SHA1 SHA512 SSDEEP

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action