Trusted Design

Malicious macro using a sneaky new trick

概要

We recently came across a file (ORDER-549-6303896-2172940.docm, SHA1: 952d788f0759835553708dbe323fd08b5a33ec66) containing a VBA project that scripts a malicious macro (SHA1: 73c4c3869304a10ec598a50791b7de1e7da58f36). We added it under the detection TrojanDownloader:O97M/Donoff – a large family of Office-targeting macro-based malware that has been active for several years (see our blog category on macro-based malware for more blogs).

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• PowerSniff Malware Used in Macro-based Attacks (score: 0.71)
• Evoltin POS Malware Attacks via Macro (score: 0.68)
• Enterprises Hit by BARTALEX Macro Malware (score: 0.68)
• Malicious Office files dropping Kasidet and Dridex (score: 0.66)
• Phishing Email Serving W97M/Dropper.cu via Office Doc with Macro (score: 0.64)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る