SecuriteInfo[.]com[.]XLM[.]Mefisto[.]27[.]Gen[.]21208[.]5047 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.XLM.Mefisto.27.Gen.21208.5047
Size 36KB
Sample201201-nctj3mmnte
SHA256 062ad65985fd4e9d7b951ab319079c74da69e2804dab3ff00a11707d4a4f9bb3
MD5 7cd1dcfa09a471a9d4f8efaf088204fe
SHA1 ba932f6dc2a741257c84b4e9be63b62173a38d24
SHA512 45899b706e88206f7c6e759c1ad49f340d8432f115c7e6ec4fd022a0143c0f2bec768cdc83d2d7d96465077dbc0a3f9498d46aeb4b057d5487d204b109ebf953
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.XLM.Mefisto.27.Gen.21208.5047

.xls 36KB

SecuriteInfo.com.XLM.Mefisto.27.Gen.21208.5047

SHA256 062ad65985fd4e9d7b951ab319079c74da69e2804dab3ff00a11707d4a4f9bb3
MD5 7cd1dcfa09a471a9d4f8efaf088204fe
SHA1 ba932f6dc2a741257c84b4e9be63b62173a38d24
SHA512 45899b706e88206f7c6e759c1ad49f340d8432f115c7e6ec4fd022a0143c0f2bec768cdc83d2d7d96465077dbc0a3f9498d46aeb4b057d5487d204b109ebf953
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro