SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2080[.]27640[.]27878 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2080.27640.27878
Size 35KB
Sample201201-a1mr7hp5a6
SHA256 74695a18d8ab2d6e079f117d0b9f2566112e2da2585ddca7539b3c575c74f020
MD5 67a9f0b679ba1de6ea6bdab93301338d
SHA1 f71cab22e174cb5d9882003100fe5ed79340e961
SHA512 9a3d96ee9b73dc8fe308b8d618fc05c2142ac5bf3a88840fdc9438e2b9f85eb0130d79cd7eb597c1f34ac82c24aa2964f938ee116ce730165ec470305ddf40f8
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2080.27640.27878

.xls 35KB

SecuriteInfo.com.Exploit.Siggen3.2080.27640.27878

SHA256 74695a18d8ab2d6e079f117d0b9f2566112e2da2585ddca7539b3c575c74f020
MD5 67a9f0b679ba1de6ea6bdab93301338d
SHA1 f71cab22e174cb5d9882003100fe5ed79340e961
SHA512 9a3d96ee9b73dc8fe308b8d618fc05c2142ac5bf3a88840fdc9438e2b9f85eb0130d79cd7eb597c1f34ac82c24aa2964f938ee116ce730165ec470305ddf40f8
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro