SecuriteInfo[.]com[.]Heur[.]11145[.]17111 | Triage

Sharing

General

Target

SecuriteInfo.com.Heur.11145.17111
Size

115KB
MD5

ef0aed5496df29894d543f176f58ffb8
SHA1

c76d78256b743d6401c2272b69eb307f1ada4a9a
SHA256

d2f1f28bac56207164e2c5364be21700303c8a8b6ef05270038736255c4593b2
SHA512

e02803c05b3ab2ffc3d93655d0c474f8af0813101da568e2f39e1c5e28d62f49aaf7d8627f1125e4d92a952cac0307b62a20686f0c0ff41dc96081dd4e204740

Score

8^/10

macro

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro

Processes:

resource yara_rule

sample office_xlm_macros

Files

SecuriteInfo.com.Heur.11145.17111
.pps windows office2003

Module1