SecuriteInfo[.]com[.]Exploit[.]Siggen2[.]12175[.]24263[.]28979 | Triage

Sharing

General

Target

SecuriteInfo.com.Exploit.Siggen2.12175.24263.28979
Size

175KB
MD5

9303da63c03de4b45d64d545c4898582
SHA1

4e45c2b76cdbb4852610fc74a5e0d65c4ce66b3c
SHA256

919a80b6e13ad304ca8f48f033d7b69939593d9bb35336e7934306593b8f6c40
SHA512

3787c91ed25130e35551cbc66a79b2fb5fb88469ba9cf4fab9a3fc17ecdd3729ebfb47310fb6005d0f74aa43773c066601ae2ed19ac07dd2d36f6a0967709ffe

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

SecuriteInfo.com.Exploit.Siggen2.12175.24263.28979
.doc windows office2003