SecuriteInfo[.]com[.]Heur[.]18406[.]27901 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.18406.27901
Size 36KB
Sample201125-gc4fdasmgj
SHA256 b7e1d9ac63ddc51db095025cdf35cc31a040e138b41ff7e0fca7e12c9884cd51
MD5 7cb5f58955bd39f5c32cf251c16ae401
SHA1 5d84f78e4dcb467a9095054f9ea8eed962475294
SHA512 751480c133f9eb5936728acc41e8a2d4e83b6e27d5e43b569c2e681e9142eb3ee07b68d1780d85ce693fcca3d0c21e54de86d81adc422f593ad9f582db5d89d0
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Heur.18406.27901

.xls 36KB

SecuriteInfo.com.Heur.18406.27901

SHA256 b7e1d9ac63ddc51db095025cdf35cc31a040e138b41ff7e0fca7e12c9884cd51
MD5 7cb5f58955bd39f5c32cf251c16ae401
SHA1 5d84f78e4dcb467a9095054f9ea8eed962475294
SHA512 751480c133f9eb5936728acc41e8a2d4e83b6e27d5e43b569c2e681e9142eb3ee07b68d1780d85ce693fcca3d0c21e54de86d81adc422f593ad9f582db5d89d0
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro