SecuriteInfo[.]com[.]Trojan[.]DOC[.]Agent[.]AQZ[.]16759[.]9069 | Triage™

Resubmissions

01/11/2020, 15:25

201101-ev3697s18a8

31/10/2020, 02:53

201031-bljmfxg65e8

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.DOC.Agent.AQZ.16759.9069
Size 957KB
Sample201031-bljmfxg65e
SHA256 67602de7ed548204bf11e9a9c3eea372fa7b9e9be33b4c4ef801b466d4240cde
MD5 1a1ee02161b83b507421e5c659e0426b
SHA1 9ead99358442843252f8129877795808315867d8
SHA512 def0f2a2ee06074f5b7e1f86d3254ea5da2e3abeb49ba49f06e5de00b87594dadbece5edca7085811b1f2e98c549e9296de147e31a4f4eed48359e7b9b672da3
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

File Explorer

SecuriteInfo.com.Trojan.DOC.Agent.AQZ.16759.9069

.doc 957KB

SecuriteInfo.com.Trojan.DOC.Agent.AQZ.16759.9069

SHA256 67602de7ed548204bf11e9a9c3eea372fa7b9e9be33b4c4ef801b466d4240cde
MD5 1a1ee02161b83b507421e5c659e0426b
SHA1 9ead99358442843252f8129877795808315867d8
SHA512 def0f2a2ee06074f5b7e1f86d3254ea5da2e3abeb49ba49f06e5de00b87594dadbece5edca7085811b1f2e98c549e9296de147e31a4f4eed48359e7b9b672da3
MD5 SHA1 SHA512

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro

ThisDocument

praco

Module1