SecuriteInfo[.]com[.]XLM[.]Mefisto[.]27[.]Gen[.]12839[.]11896 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.XLM.Mefisto.27.Gen.12839.11896
Size 36KB
Sample201201-ph3j9baymj
SHA256 e9b90da35666899b2e8ae130daa93322149da75a4d68c96f4f6dbea18d9e368e
MD5 70ae1d5cbad0615a8605964ed63ebf90
SHA1 b1a5091a55fc81c443958304588a9411e902f07d
SHA512 20672c8f7ec9b4d8af3fe8c97c6335ff3c201901c1576b71e92ed7c6be758f6f0cb0239a20ba3f3620f86388f96947bfcd39d1ef4b20584406b311d72ab15986
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.XLM.Mefisto.27.Gen.12839.11896

.xls 36KB

SecuriteInfo.com.XLM.Mefisto.27.Gen.12839.11896

SHA256 e9b90da35666899b2e8ae130daa93322149da75a4d68c96f4f6dbea18d9e368e
MD5 70ae1d5cbad0615a8605964ed63ebf90
SHA1 b1a5091a55fc81c443958304588a9411e902f07d
SHA512 20672c8f7ec9b4d8af3fe8c97c6335ff3c201901c1576b71e92ed7c6be758f6f0cb0239a20ba3f3620f86388f96947bfcd39d1ef4b20584406b311d72ab15986
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro