General

  • Target

    220915-jkb2asgacl_pw_infected.zip

  • Size

    57KB

  • MD5

    cf90650a9e759cd858bffec3be6a60c5

  • SHA1

    4a594ae094963d73a0c1c578c6ec197bf1e3d300

  • SHA256

    1113c5a60ba15ffd2752293f8653c7e5fa4d73892a5560e5defae2a59cd8dfba

  • SHA512

    373add8ef8aff8557855eddc4f0c7749c49b902c82a64fff8fadc0843bc8c37881dbc184fb5caffd376650b3021e497b3e20e6ff7bc35a6dc89382ac417a3fc5

  • SSDEEP

    1536:inEQsFlGYbZ4MPYyev5IrLLra+mfDRaJyXrLqapW/ZUZT:iEQsr1Z4MPLeirLLrYBrL5w/OZT

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office MHTML OLEObject
C2

ftp://epiz_32594997:[email protected]/htdocs/a.html

Signatures

  • Office document contains embedded OLE objects 1 IoCs

    Detected embedded OLE objects in Office documents.

Files

  • 220915-jkb2asgacl_pw_infected.zip
    .zip

    Password: infected

  • 8d61ea9ef38b6e7b36f466299223ad43339080d3a9914059c88ca3dd6be5cd32
    .docx office2007