SecuriteInfo[.]com[.]DOC[.]Kryptik[.]Q[.]10203 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.DOC.Kryptik.Q.10203
Size 308KB
Sample200713-797m9tzbkn
SHA256 509675060738c04bac197d7914eb3ec90da8246910466f7597440e1fef194320
MD5 ad17abb0af05e823197e08b483a27af7
SHA1 0636bcb12bf307d0ff0df6bcd30907c68944f3f9
SHA512 6aa29983e223f8ad0be20762dc63497e124eb272237981d5a50f34b33cb9ec786f765615c9c45deedb638adc5b0ee8ebe35444373c90d01ca0bd73a04e614926
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.DOC.Kryptik.Q.10203

.xls 308KB

SecuriteInfo.com.DOC.Kryptik.Q.10203

SHA256 509675060738c04bac197d7914eb3ec90da8246910466f7597440e1fef194320
MD5 ad17abb0af05e823197e08b483a27af7
SHA1 0636bcb12bf307d0ff0df6bcd30907c68944f3f9
SHA512 6aa29983e223f8ad0be20762dc63497e124eb272237981d5a50f34b33cb9ec786f765615c9c45deedb638adc5b0ee8ebe35444373c90d01ca0bd73a04e614926
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro