SecuriteInfo[.]com[.]DOC[.]Kryptik[.]Q[.]16857 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.DOC.Kryptik.Q.16857
Size 312KB
Sample200713-czd3xn1t22
SHA256 470b3a5fb1ab578231f5787da6a163c15340c2c7f8be9b74999663c9a1966f46
MD5 acea2b39f8d059841685584823440bd7
SHA1 158c511f1583ef9f8e43ae6113f03e19bb0027c3
SHA512 eb59e721e97c2b62bbde595bda2066aecfb7956bcc970b42a67615ee2b497ac360b7d2feb6a77f619e05fe94ccaa7ee0e427a29e2ebe605f62304398c30c632d
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.DOC.Kryptik.Q.16857

.xls 312KB

SecuriteInfo.com.DOC.Kryptik.Q.16857

SHA256 470b3a5fb1ab578231f5787da6a163c15340c2c7f8be9b74999663c9a1966f46
MD5 acea2b39f8d059841685584823440bd7
SHA1 158c511f1583ef9f8e43ae6113f03e19bb0027c3
SHA512 eb59e721e97c2b62bbde595bda2066aecfb7956bcc970b42a67615ee2b497ac360b7d2feb6a77f619e05fe94ccaa7ee0e427a29e2ebe605f62304398c30c632d
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro