SecuriteInfo[.]com[.]Heur[.]18542[.]14627 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.18542.14627
Size 42KB
Sample201005-ek68mrdpyj
SHA256 456d7c03dc42eaecba83b0dd4193dd6074158a1a60bd06e9fa8b763398903c79
MD5 011ff137c607a956f60a93881eede39d
SHA1 7b2744fe6d6bb0e9dd7cadad30d216a866496c1b
SHA512 90cd7ac9a9cd5e55aee274b0b417749b24394034f06c2fc351e537185c68858f63648a69e048f74386c7d63b3babeaf675a165d6f8a8d3297d5eb0c6cfd9febc
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Heur.18542.14627

.xls 42KB

SecuriteInfo.com.Heur.18542.14627

SHA256 456d7c03dc42eaecba83b0dd4193dd6074158a1a60bd06e9fa8b763398903c79
MD5 011ff137c607a956f60a93881eede39d
SHA1 7b2744fe6d6bb0e9dd7cadad30d216a866496c1b
SHA512 90cd7ac9a9cd5e55aee274b0b417749b24394034f06c2fc351e537185c68858f63648a69e048f74386c7d63b3babeaf675a165d6f8a8d3297d5eb0c6cfd9febc
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro