SecuriteInfo[.]com[.]Exploit[.]Siggen2[.]12924[.]1168[.]4752 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen2.12924.1168.4752
Size 173KB
Sample200801-eclzez2tj2
SHA256 b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378
MD5 8926558472c411e95e18b57c17b6c8d9
SHA1 b5461e95c29e6e38b242ecf5ff10c6883f41371b
SHA512 6b93474601d89a01b2974f4d3596c387725f011f37dabcd074d9cd2e1a072e8510ea961b9ad08b2c41f0565fa6e09eeb51a3a4af45e8151ccf202d9af80eafd4
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen2.12924.1168.4752

.doc 173KB

SecuriteInfo.com.Exploit.Siggen2.12924.1168.4752

SHA256 b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378
MD5 8926558472c411e95e18b57c17b6c8d9
SHA1 b5461e95c29e6e38b242ecf5ff10c6883f41371b
SHA512 6b93474601d89a01b2974f4d3596c387725f011f37dabcd074d9cd2e1a072e8510ea961b9ad08b2c41f0565fa6e09eeb51a3a4af45e8151ccf202d9af80eafd4
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro