SecuriteInfo[.]com[.]XLM[.]Mefisto[.]27[.]Gen[.]27267[.]31826 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.XLM.Mefisto.27.Gen.27267.31826
Size 36KB
Sample201201-xsybbrnvms
SHA256 5fd43cd24e2a886f1f4837f20df6dab9f96716d01d768e785943ccec6f3a6a2f
MD5 63c43c6b18a4e044ccfb566ff42c4e4d
SHA1 d680e2254e21f563ad525369c59d4ed7db12fa87
SHA512 a1b3786ea943356b82fc4d9a0c3ea8df39b00b9de5553e7b1547e834e60b28b848d5673dd79a73810d22c40387a8d9de927e2ea952d7ef9a88135196436039c8
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.XLM.Mefisto.27.Gen.27267.31826

.xls 36KB

SecuriteInfo.com.XLM.Mefisto.27.Gen.27267.31826

SHA256 5fd43cd24e2a886f1f4837f20df6dab9f96716d01d768e785943ccec6f3a6a2f
MD5 63c43c6b18a4e044ccfb566ff42c4e4d
SHA1 d680e2254e21f563ad525369c59d4ed7db12fa87
SHA512 a1b3786ea943356b82fc4d9a0c3ea8df39b00b9de5553e7b1547e834e60b28b848d5673dd79a73810d22c40387a8d9de927e2ea952d7ef9a88135196436039c8
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro