SecuriteInfo[.]com[.]XLM[.]Mefisto[.]27[.]Gen[.]2888[.]9482 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.XLM.Mefisto.27.Gen.2888.9482
Size 36KB
Sample201201-7x7yws3cc2
SHA256 d0b90f932674036a1bd4db4c9b050ee66f6b1147e9e6e5f5900eb25d2c8a90b6
MD5 7dc70ac2e92d3b9edcb519909e69aeab
SHA1 1ed8e0946c3a1fa8d7fad0071f05427d35c803e4
SHA512 4483577cf45bb8b00ba51052f465f492835354ff8c68ba66d27dc979ab4281ff8f7bfce4651dff27215539094d6f9234121cf7a4fe493e276009037d4c65fa58
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.XLM.Mefisto.27.Gen.2888.9482

.xls 36KB

SecuriteInfo.com.XLM.Mefisto.27.Gen.2888.9482

SHA256 d0b90f932674036a1bd4db4c9b050ee66f6b1147e9e6e5f5900eb25d2c8a90b6
MD5 7dc70ac2e92d3b9edcb519909e69aeab
SHA1 1ed8e0946c3a1fa8d7fad0071f05427d35c803e4
SHA512 4483577cf45bb8b00ba51052f465f492835354ff8c68ba66d27dc979ab4281ff8f7bfce4651dff27215539094d6f9234121cf7a4fe493e276009037d4c65fa58
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro