SecuriteInfo[.]com[.]005690e01[.]4442 | Triage™

Sharing

Copy URL Twitter E-mail

Reason

office: invalid password

General

Target
SecuriteInfo.com.005690e01.4442
Size 390KB
Sample200707-jsqdxrw62e
SHA256 1369f1076675f806c3dd92cec3d1115f2e94487a2701af820d31043550b9dc02
MD5 9acf4fdfed5ee983f6ce6916238a78b4
SHA1 c9e17a1b04276976edfe94e48186cee0f88b9c16
SHA512 e120811c07d39cb5b2bf243784a75916a2e9f03f5b4a83e97fdd393477735d76058eff44c1023a62780023d9237206f628b80985d50d4744cd2e16f96bef6348
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.005690e01.4442

.xls 390KB

SecuriteInfo.com.005690e01.4442

SHA256 1369f1076675f806c3dd92cec3d1115f2e94487a2701af820d31043550b9dc02
MD5 9acf4fdfed5ee983f6ce6916238a78b4
SHA1 c9e17a1b04276976edfe94e48186cee0f88b9c16
SHA512 e120811c07d39cb5b2bf243784a75916a2e9f03f5b4a83e97fdd393477735d76058eff44c1023a62780023d9237206f628b80985d50d4744cd2e16f96bef6348
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro