.. /.Asd

Phishing
Double Click
Macros

Contributors:

mr.d0x

Description:

ASD is a Microsoft Word Auto Recovery Document. It can be used to execute malicious macros.

OS:

Windows

Recommendation:

Disable macros via GPO and whitelist the users that are permitted to run macros. For end users, turn off macros from Word's settings.

Resources:

File Samples:

https://www.hybrid-analysis.com/sample/7342c6ea1fc3362afa7879ed582d246172e9dc1a5a89d50a202bf5c5b60cb87e