SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2886[.]20239[.]31898 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2886.20239.31898
Size 36KB
Sample201201-551arpcxrx
SHA256 8dca64cd407c4a018dc60c6522490349ef8087cd8a4f7dc6bd50c3e4e21a5297
MD5 2374473139a7ffab384f35582ea5fe11
SHA1 da5486856201adf264d19b8c3ba5dc48966a3272
SHA512 785ebab4f668716ffffa778ec3c859134fe7a6b48022cf188ff686743a86a6345b31ea75729c9b97d60d29e1a29769b4040346691c002d4beae836b8b63621d1
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2886.20239.31898

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.2886.20239.31898

SHA256 8dca64cd407c4a018dc60c6522490349ef8087cd8a4f7dc6bd50c3e4e21a5297
MD5 2374473139a7ffab384f35582ea5fe11
SHA1 da5486856201adf264d19b8c3ba5dc48966a3272
SHA512 785ebab4f668716ffffa778ec3c859134fe7a6b48022cf188ff686743a86a6345b31ea75729c9b97d60d29e1a29769b4040346691c002d4beae836b8b63621d1
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro