TOQanqDa_phvJBB[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TOQanqDa_phvJBB.zip
Size 105KB
Sample211006-y698jsbhak
SHA256 689dce72ea64e2985566bfe20ef791310bdf995f1bc0a868383109d0cf2a116b
MD5 6e75d8c80a3d78072a0ec5d1ad95a2fd
SHA1 b99867b5a1aae5b02120c94d0d7f16370b6d93c0
SHA512 b33d83c393d17f6ca82a3025bb73d0749102d9a4d990b4ee0f3b2227196e816ebba68d3c77e3c896acb8bc5e70e0c346a46da23a0eb95420923d33f6452bfb5c
MD5 SHA1 SHA512

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource	yara_rule
static1/unpack001/TOQanqDa_phvJBB.docm	office_macros

File Explorer

TOQanqDa_phvJBB.zip

.zip 105KB
TOQanqDa_phvJBB.docm

.docm .doc 110KB

TOQanqDa_phvJBB.zip

SHA256 689dce72ea64e2985566bfe20ef791310bdf995f1bc0a868383109d0cf2a116b
MD5 6e75d8c80a3d78072a0ec5d1ad95a2fd
SHA1 b99867b5a1aae5b02120c94d0d7f16370b6d93c0
SHA512 b33d83c393d17f6ca82a3025bb73d0749102d9a4d990b4ee0f3b2227196e816ebba68d3c77e3c896acb8bc5e70e0c346a46da23a0eb95420923d33f6452bfb5c
MD5 SHA1 SHA512

Password

E7831