General

  • Target

    PO.xls

  • Size

    105KB

  • MD5

    a7af335a57f5ebce9880de291cc6fbf2

  • SHA1

    5aec9aaca0aa44a7986f58e4c3b0b2f8ebe7a1a5

  • SHA256

    b0bc54c847d176de306e4c7b5b33422525788fa8dfeae43a1a45b1c58c063f8f

  • SHA512

    5f5a75f2ddf6e6dfde8d5f0873d15e5ffdb868e78c05b7d377495d3393fa18638b5ddc4b10f2696e9cbbf9f042c29aae07b3fdcdccf8604b86b0d76e82f199e0

  • SSDEEP

    3072:oMxEtjPOtioVjDGUU1qfDlaGGx+cL2QnAb9pWkmanzr0O8eKdshErls:jxEtjPOtioVjDGUU1qfDlavx+W2QnAb7

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • PO.xls
    .xls windows office2003

    Module1

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3