SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]1643[.]10834[.]28071 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.1643.10834.28071
Size 36KB
Sample201201-trecdarbhx
SHA256 527326a708bd2e154d3d67a823ef2ed8389b63cce55d0739b5cebecab068202a
MD5 16b1c6ac0240a60343784bfeab02d675
SHA1 af43e9c4713154ca5934c183181f1144ce014972
SHA512 def4af539cd9ac06913b9f11db7359db8a6b42cda0d8b504d0cd363c2f6a7ccdc1c3a238a0f42a03c8d1be5f1115946fbbb338abaf5448c5515603e6865defc7
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.1643.10834.28071

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.1643.10834.28071

SHA256 527326a708bd2e154d3d67a823ef2ed8389b63cce55d0739b5cebecab068202a
MD5 16b1c6ac0240a60343784bfeab02d675
SHA1 af43e9c4713154ca5934c183181f1144ce014972
SHA512 def4af539cd9ac06913b9f11db7359db8a6b42cda0d8b504d0cd363c2f6a7ccdc1c3a238a0f42a03c8d1be5f1115946fbbb338abaf5448c5515603e6865defc7
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro