0cf1e59bae9dba7fbbf6ee6a36ca6bdb8fa0ac002b8cf824bd0888789a981c57[.]doc

General

Target

0cf1e59bae9dba7fbbf6ee6a36ca6bdb8fa0ac002b8cf824bd0888789a981c57.doc
Size

1.5MB
MD5

4105549d9f60955620bdf657ecb7b172
SHA1

4f7e22349c3e9375990752f384d8111e9f9857dc
SHA256

0cf1e59bae9dba7fbbf6ee6a36ca6bdb8fa0ac002b8cf824bd0888789a981c57
SHA512

d8fbf69dbd5d4494e74c9f216a37f8a4d9edc476232a445ee501ef9cb23f2bc1c0b05ee6a43f48ac811c0613d6b4be0b0935b930dbb6e0c42995b4a19974139f
SSDEEP

12288:zHUjbj98601ZD9ah7etv8YWWpeRnkeifX0Kgbo3Zrm9icmUQ2L:zUj501ZD93nMkXnyRmUV

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
sample