SecuriteInfo[.]com[.]XLM[.]Mefisto[.]27[.]Gen[.]22585[.]6577 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.XLM.Mefisto.27.Gen.22585.6577
Size 36KB
Sample201201-dp2hv4rh86
SHA256 1a67cebb408075c1a46c5b080164c966c6acc456ba565cbb1dcac0ee061ce760
MD5 32c0ad6d7df66dc5eb328f25523e74ab
SHA1 abb812d5a0ccbe722c3b6447fac0720956287f03
SHA512 fd9e934a81d4a7922f30f9660a73224e1791454eded766f131b89bc0d119fe7fd97f759c8f151ed90fd2126bd6d35d56826e895268ee04b9bda38360c34d3126
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.XLM.Mefisto.27.Gen.22585.6577

.xls 36KB

SecuriteInfo.com.XLM.Mefisto.27.Gen.22585.6577

SHA256 1a67cebb408075c1a46c5b080164c966c6acc456ba565cbb1dcac0ee061ce760
MD5 32c0ad6d7df66dc5eb328f25523e74ab
SHA1 abb812d5a0ccbe722c3b6447fac0720956287f03
SHA512 fd9e934a81d4a7922f30f9660a73224e1791454eded766f131b89bc0d119fe7fd97f759c8f151ed90fd2126bd6d35d56826e895268ee04b9bda38360c34d3126
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro