SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2886[.]3080[.]25558 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2886.3080.25558
Size 36KB
Sample201201-a8j81hm43x
SHA256 1613db48a8fe83658e17fdb2284b38bdaf09b9bca03becdd2e071274ab2bbf4f
MD5 de1259bd4a4db4a927c15ee2a0d37441
SHA1 05963b426d412a4f3e66f45bbda5571ce9869321
SHA512 59f3de873f2957c2762bc862740d2d7d4e1cabc06efdc1d7d23d58316210a8668047c5ef140b5fbf01127e21eccb8556c0aff264da18b55f5872f44be047a07c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2886.3080.25558

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.2886.3080.25558

SHA256 1613db48a8fe83658e17fdb2284b38bdaf09b9bca03becdd2e071274ab2bbf4f
MD5 de1259bd4a4db4a927c15ee2a0d37441
SHA1 05963b426d412a4f3e66f45bbda5571ce9869321
SHA512 59f3de873f2957c2762bc862740d2d7d4e1cabc06efdc1d7d23d58316210a8668047c5ef140b5fbf01127e21eccb8556c0aff264da18b55f5872f44be047a07c
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro