General

  • Target

    6655026d703e9efb9805807cb20b7d8284ff91979f5b746c32a965ca1a268ca4

  • Size

    1000KB

  • MD5

    603bebc04d98f9a62b4201c6d46f9ba6

  • SHA1

    345fb60733a9cb98d9ec051ec3d33abf721477fc

  • SHA256

    6655026d703e9efb9805807cb20b7d8284ff91979f5b746c32a965ca1a268ca4

  • SHA512

    917699e9f97a13a18c7a531a1b136816ae95f647d7e41fa6b56f81ac8ff63e6de877c5672977fcbd5d2705e4a17f317c105c0d3a3d7d7b5aaff64930e6ef6aa2

  • SSDEEP

    12288:XcBhBcwBU/GSgpBWS/UuncHdnAR317DnF1frM9cgaDKnLOKIsW3Uc1w4XBIPDw0w:XcfJ2IpBTcuncqbPFac2nhIvRHl

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 6655026d703e9efb9805807cb20b7d8284ff91979f5b746c32a965ca1a268ca4
    .doc .js windows office2003

    ThisDocument

    mouth_had_been

    steps_hath_my

    knave_hor_ay

    with_this_straw

    most_conveniently_exeunt

    haste_exit_mar

    of_reason_panders

    musty_enter

    of_since_clown

    death_and_gifts

    i_know_his

    of_the_trumpet

    and_so_my

    whereon_his_vouchers

    with_modesty

    with_villanies

    to_the_best

    him_good_night

    they_are_arrant

    quite_chap

    it_accident_laer

    is_out_of

    a_list_his

    creation_ecstasy_of

    wassail_and_i

    their_functions

    black_as_mad

    and_for_if

    do_thou_wilt

    d_and_his

    the_moon_can

    for_what_this

    will_it_is

    for_diet_we

    him_be_so

    makes_it_as

    the_quick_lie