General

  • Target

    8201416580.zip

  • Size

    11KB

  • MD5

    2ee150adaac2f3f1a54be70334e01f2a

  • SHA1

    c8a9dba69a904b51e89788ddfb1f3322768481e2

  • SHA256

    b3d4099396e806114d16399f93161ca945afe4138282083bf3b36de68461337a

  • SHA512

    6dbcfc1c8e069fd3dbfc97d036c0ba5c5181516f2f4e28e82abfb606b3e630e8735f849ee18ed869a4b0d9d244c7c08c9cce76ece9f01608a72addcdd987d265

  • SSDEEP

    192:8v1lMYHsCAG5FZZPt/h+qcF8VXPQBuPhuuhJycnYUZTZv5My9BXxJnuOhxVEg8hL:8DMDAFZZV/h+qcF8JPpPhuuiyZT153B4

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8201416580.zip
    .zip

    Password: infected

  • 20e2093192e7b7b96c067cd8f16cee4ccb51e8c10676050646877bc83dc34a27
    .xls windows office2003

    ThisWorkbook

    kQeeH