SecuriteInfo[.]com[.]Exploit[.]Siggen3[.]24636[.]10099[.]1305 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Exploit.Siggen3.24636.10099.1305
Size 113KB
Sample220111-17cpsahfe9
SHA256 a43e422bf49682cd2dd5c53f5e3c8b8712c76cd9f082309e92decc55f0f8f92e
MD5 f99be384d572f9f00d4466e2afcc1cd5
SHA1 426f5b48dacd22376470e270434590d9e94063c2
SHA512 811eb771ed03d54a9cb50ad5eb2dbd0f3a0f18c19354a6b9d55326284a89cb46b231c5f51efe97856a231ef24495f7e300e7704567a1893a12219e39ff0f8df3
MD5 SHA1 SHA512

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with 4.0 macros.

resource	yara_rule
sample	office_xlm_macros

File Explorer

SecuriteInfo.com.Exploit.Siggen3.24636.10099.1305

.xls 113KB

SecuriteInfo.com.Exploit.Siggen3.24636.10099.1305

SHA256 a43e422bf49682cd2dd5c53f5e3c8b8712c76cd9f082309e92decc55f0f8f92e
MD5 f99be384d572f9f00d4466e2afcc1cd5
SHA1 426f5b48dacd22376470e270434590d9e94063c2
SHA512 811eb771ed03d54a9cb50ad5eb2dbd0f3a0f18c19354a6b9d55326284a89cb46b231c5f51efe97856a231ef24495f7e300e7704567a1893a12219e39ff0f8df3
MD5 SHA1 SHA512

windows office2003

Suspicious Office macro

Office document equipped with 4.0 macros.

macro xlm