SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]1632[.]5096[.]26470 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.1632.5096.26470
Size 36KB
Sample201201-ab87a6f48n
SHA256 e3d8d4908bf4f8296cdddf62a458de511536184b89c72069e0a4c4f7c56eda47
MD5 405751df1a835b6a9effa797604bcccb
SHA1 ee371591babf57d0bb331b1cd40e6d1aa1301cbb
SHA512 ad0d3ed6ac7834d2675ddc2cffa34e7eea97cf55c0fb3ca26bcf3c54e542b7f5e5bec38ddabeb901ffb8056b001ee951b954c62dc8aad24c4adf0d94e39611af
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.1632.5096.26470

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.1632.5096.26470

SHA256 e3d8d4908bf4f8296cdddf62a458de511536184b89c72069e0a4c4f7c56eda47
MD5 405751df1a835b6a9effa797604bcccb
SHA1 ee371591babf57d0bb331b1cd40e6d1aa1301cbb
SHA512 ad0d3ed6ac7834d2675ddc2cffa34e7eea97cf55c0fb3ca26bcf3c54e542b7f5e5bec38ddabeb901ffb8056b001ee951b954c62dc8aad24c4adf0d94e39611af
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro