SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2878[.]11210[.]31965 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2878.11210.31965
Size 36KB
Sample201201-sln774hd7a
SHA256 157fb74cb2b0accfd013b6191d382ce4d55de424eb696aa2bef569a09638872e
MD5 a3c4b5aec3c2aa435fa0ebc66c32b1fa
SHA1 7a2ac194007bd6ce8aff1d302198e9b6bf42ac63
SHA512 7da7dd49092d07249f412bce2e1121bfe7ff5bc60c498509ba67742962e5a8d27f1dcb43126e3d74d7ccf671e5342e00bac0181e1739a7589abaa9a795f10a99
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2878.11210.31965

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.2878.11210.31965

SHA256 157fb74cb2b0accfd013b6191d382ce4d55de424eb696aa2bef569a09638872e
MD5 a3c4b5aec3c2aa435fa0ebc66c32b1fa
SHA1 7a2ac194007bd6ce8aff1d302198e9b6bf42ac63
SHA512 7da7dd49092d07249f412bce2e1121bfe7ff5bc60c498509ba67742962e5a8d27f1dcb43126e3d74d7ccf671e5342e00bac0181e1739a7589abaa9a795f10a99
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro