SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]2810[.]16222[.]13882 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.2810.16222.13882
Size 36KB
Sample201201-xtcq697w2n
SHA256 29a0779fb3329f11c5df4c3672eab7c6ea4cd109f37a59fa885c949075ed3eb2
MD5 51078e95ecbe7f3972b1555931e5d5d5
SHA1 491c23c2ce28fbd73ee0168324a627dfe9ee1902
SHA512 09f2c6d076be9779de4c748407e3878bb1dc1e9ebc1d9448fcda6f3f7735b57bdd9fe8e71fc9535f3a3202cd35fc632af6369a79c9477ff536d1797962cbe5b9
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.2810.16222.13882

.xls 36KB

SecuriteInfo.com.Exploit.Siggen3.2810.16222.13882

SHA256 29a0779fb3329f11c5df4c3672eab7c6ea4cd109f37a59fa885c949075ed3eb2
MD5 51078e95ecbe7f3972b1555931e5d5d5
SHA1 491c23c2ce28fbd73ee0168324a627dfe9ee1902
SHA512 09f2c6d076be9779de4c748407e3878bb1dc1e9ebc1d9448fcda6f3f7735b57bdd9fe8e71fc9535f3a3202cd35fc632af6369a79c9477ff536d1797962cbe5b9
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro