General

  • Target

    220127-nlyznsbgbr_pw_infected.zip

  • Size

    74KB

  • MD5

    8fb443a1c7d3b0975f0f6dc5fbd21e00

  • SHA1

    2ff1f8477730d4068921c13b77d6557474e36624

  • SHA256

    9f130d1d6baed96efdb717727151794eef73e80d9a18f02ad4895d2f65ed29f9

  • SHA512

    ab3e743625106d2f8d6b3bd45d7559394e648ee6fd61880eea42a74ae024236c7d7a8808ba2a96d7cd2dc2daa7214d8a8595b7e0cfa75957f2d83a08e4420cb4

  • SSDEEP

    1536:lT3HTJDjEIoFKk1dMn2LOBmAN3izXD7kCZSHvGd05lME5YG:N3zJDQn71mn2LOmqSzToLHvGabr

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 220127-nlyznsbgbr_pw_infected.zip
    .zip

    Password: infected

  • qakbot.zip
    .zip

    Password: infected

  • deed contract 01.22.2021.doc
    .docm .doc office2007

    ThisDocument

    frm

    aWtKU

    aj4cPU