SecuriteInfo[.]com[.]VBA[.]Heur[.]Ursnif[.]2[.]F934D3F1[.]Gen[.]21585[.]20914 | Triage

Sharing

General

Target

SecuriteInfo.com.VBA.Heur.Ursnif.2.F934D3F1.Gen.21585.20914
Size

243KB
MD5

38dad5dbfc291ff10af3af06093e5a1f
SHA1

c98f1cb50a7e0980060e3d78aff5e7d2d1eb38cb
SHA256

ba7731b6dc348e539c3e92a30f7811579de525f4346b223430b0b668e68e30c0
SHA512

69b5a320e2bfd9b8abaab2aa9eea6ee60b0dd1cb069b7a8ecf1da80760b9c8f13f67846a59151b1fe59e95844c7a627715ae9e4cd6de551ab404973feaa122c7

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

Processes:

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs
Office document equipped with macros.
macro

Processes:

resource yara_rule

sample office_macros

Files

SecuriteInfo.com.VBA.Heur.Ursnif.2.F934D3F1.Gen.21585.20914
.xls windows office2003

Module1

ThisWorkbook

Sheet1

Sheet2

Sheet3