SecuriteInfo[.]com[.]Heur[.]13015[.]25464 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Heur.13015.25464
Size 36KB
Sample201201-pfe562x15s
SHA256 d2d829ca93afa71cbe24762b562f6079e2e1d4082e166c7181e198a4c8da32c5
MD5 a9eab970ea7c70eb180671005155582d
SHA1 cef8de1a8923313e65f2dd8cf5d00c5a10bf0c9a
SHA512 55bde4081bfcd6a386601cd59c704e5f4781da54be2488e5406959746478d722af435726f91ff96c2526a7c3109b2c44fa51ffcb5ec618ac1e1a413f96c9613e
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Heur.13015.25464

.xls 36KB

SecuriteInfo.com.Heur.13015.25464

SHA256 d2d829ca93afa71cbe24762b562f6079e2e1d4082e166c7181e198a4c8da32c5
MD5 a9eab970ea7c70eb180671005155582d
SHA1 cef8de1a8923313e65f2dd8cf5d00c5a10bf0c9a
SHA512 55bde4081bfcd6a386601cd59c704e5f4781da54be2488e5406959746478d722af435726f91ff96c2526a7c3109b2c44fa51ffcb5ec618ac1e1a413f96c9613e
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro