SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]3109[.]22920[.]31754 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.3109.22920.31754
Size 36KB
Sample201201-7trva79arn
SHA256 718cca0f792d1043f7009ffc5fa4ba74e467abc33a13cbe75bee10ed3c48fca7
MD5 fd8cf39d1847d2e4a35dbce33fd95a4a
SHA1 a495149b6ab4b8ce856e700a62d4b28de4b46f87
SHA512 03696f1c5e9c8bb4565cc9633bd0fc44df933f6c6a0f0ccfc82c61d2b30f33298809aa9e1c8f78596e33b69c59cf9ba377d07db3ac90398ba0588932199b9f9a
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.3109.22920.31754

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.3109.22920.31754

SHA256 718cca0f792d1043f7009ffc5fa4ba74e467abc33a13cbe75bee10ed3c48fca7
MD5 fd8cf39d1847d2e4a35dbce33fd95a4a
SHA1 a495149b6ab4b8ce856e700a62d4b28de4b46f87
SHA512 03696f1c5e9c8bb4565cc9633bd0fc44df933f6c6a0f0ccfc82c61d2b30f33298809aa9e1c8f78596e33b69c59cf9ba377d07db3ac90398ba0588932199b9f9a
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro