SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2900[.]30864[.]27186 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2900.30864.27186
Size 36KB
Sample201201-t2dejenkln
SHA256 3c346cf00ccddbd0e74414dc915f8dfbe4b0ebf5abc858ee32effdc6c11d31be
MD5 d03995d5dc0a317f111ba13d422b0b6f
SHA1 9183f4812c1617562d44a4ca8d4c38f4f2b153dc
SHA512 55c28c15529ece04421701aac9c2ffde6eb269968ac5f0c4bfb143f4120e58eb8f403698fa0da579b847629ef8e29b711063382e6fa1858cac4ef436f03717bc
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2900.30864.27186

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.2900.30864.27186

SHA256 3c346cf00ccddbd0e74414dc915f8dfbe4b0ebf5abc858ee32effdc6c11d31be
MD5 d03995d5dc0a317f111ba13d422b0b6f
SHA1 9183f4812c1617562d44a4ca8d4c38f4f2b153dc
SHA512 55c28c15529ece04421701aac9c2ffde6eb269968ac5f0c4bfb143f4120e58eb8f403698fa0da579b847629ef8e29b711063382e6fa1858cac4ef436f03717bc
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro