Resubmissions

11-03-2021 08:29

210311-xz5agtlhpe 8

11-03-2021 05:24

210311-j9r2p3232j 8

General

  • Target

    xmj.bin.zip

  • Size

    131KB

  • MD5

    16164d8b641ae8bf1f89ae70ca632c8c

  • SHA1

    7d4a3ecc4b1eb9594e26dfb066f68229e0c6005b

  • SHA256

    e9866e66273129ebe5ff7ff56e1a5fe511deeac1a33cb763f3c30ef89f27b733

  • SHA512

    76f20ace435ff290f8cb9e72469445bed99c88db1b3d0e807e8d28e3a13e26a2cb55dba742fd41cc37d9cb7c6e9d37b71065ad02f5eadaebcc2d7c8c6f006e24

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • xmj.bin.zip
    .zip

    Password: infected

  • xmj.bin
    .xls windows office2003

    ThisWorkbook

    Sheet1

    Sheet2