example[.]doc | Triage™

General

Target
example.doc
Size 238KB
Sample240409-mbfjxace45
SHA256 6d56a5ad04099d7279f3345e631dc2bd6b7376178a574de1d72b030941f2a934
MD5 dd0e89d2eddea2218868bf62de23f5f3
SHA1 43a08cea00e4d9ee2cde300ae78eaefbf08db295
SHA512 f75fad9149b15e6f31d6906c905af771d31825ddde8e48b55a6dc00199792e2ae758d11fb7945e1a00e937dcfe7ad3f629eabe643b56e176a7df439768832256
SSDEEP 3072:PsDvSytcYjqeMBvVvHQkZTFcsp0SWBce85gb73SjGn1WTrAw84ispo4MASKJl:P8cYjPMrvHQk7cs21ca73K7TrAwgSV
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

SHA256 6d56a5ad04099d7279f3345e631dc2bd6b7376178a574de1d72b030941f2a934
MD5 dd0e89d2eddea2218868bf62de23f5f3
SHA1 43a08cea00e4d9ee2cde300ae78eaefbf08db295
SHA512 f75fad9149b15e6f31d6906c905af771d31825ddde8e48b55a6dc00199792e2ae758d11fb7945e1a00e937dcfe7ad3f629eabe643b56e176a7df439768832256
SSDEEP 3072:PsDvSytcYjqeMBvVvHQkZTFcsp0SWBce85gb73SjGn1WTrAw84ispo4MASKJl:P8cYjPMrvHQk7cs21ca73K7TrAwgSV
MD5 SHA1 SHA512 SSDEEP

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action