SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]1886[.]30190[.]6160 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.1886.30190.6160
Size 36KB
Sample201201-jwcpazzmlx
SHA256 f73d2dac27db211208a56ffa95518889802b9c105c3c8487f6c25ee41b4b64c5
MD5 e779fe6fb5b1e43a20ddee80288eb4f4
SHA1 338644de8228c8a0f6d6e892fffda6eeaf37b3ef
SHA512 cedd878235f1ce37ece8c2a0b8d43a30bb678012c5f350455a7a06fd2f030892fe68bc69c31a0c2b6322690497b1a43d8c7de2b5188a635644d43395ff6f93d7
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.1886.30190.6160

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.1886.30190.6160

SHA256 f73d2dac27db211208a56ffa95518889802b9c105c3c8487f6c25ee41b4b64c5
MD5 e779fe6fb5b1e43a20ddee80288eb4f4
SHA1 338644de8228c8a0f6d6e892fffda6eeaf37b3ef
SHA512 cedd878235f1ce37ece8c2a0b8d43a30bb678012c5f350455a7a06fd2f030892fe68bc69c31a0c2b6322690497b1a43d8c7de2b5188a635644d43395ff6f93d7
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro