mpresas[.]msi | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
mpresas.msi
Size 3.3MB
Sample200707-t1vybbdcyj
SHA256 1d920f023b0bec46b62fc028689ced3ae13eb73347a1c102a88b2f37a9018598
MD5 bee3115f859dc2471dca52532934aa7e
SHA1 5950465ccbacb709447f0e2e31caccfd0949da80
SHA512 92a06b8779f74b8ccd381e3ed403e54c97bdb4015c99d5b604777f7c64ec59a24f0c9e543df321b1b91672cbd35d6bebee270f4b7d3aadbea5ac5eaff33007d3
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

js 1 IoCs

resource	yara_rule
sample	js

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

mpresas.msi

.msi 3.3MB

mpresas.msi

SHA256 1d920f023b0bec46b62fc028689ced3ae13eb73347a1c102a88b2f37a9018598
MD5 bee3115f859dc2471dca52532934aa7e
SHA1 5950465ccbacb709447f0e2e31caccfd0949da80
SHA512 92a06b8779f74b8ccd381e3ed403e54c97bdb4015c99d5b604777f7c64ec59a24f0c9e543df321b1b91672cbd35d6bebee270f4b7d3aadbea5ac5eaff33007d3
MD5 SHA1 SHA512

js
Suspicious Office macro

Office document equipped with 4.0 macros.

macro