General

  • Target

    59e66f03c2af743ff84944db960982472c2720d608dd63550a0b382344897c8a.doc

  • Size

    1.3MB

  • MD5

    a805159fdf3fc67f90abf90b970f66d9

  • SHA1

    27118fd1c26414524c4c390116b1cf6344289a42

  • SHA256

    59e66f03c2af743ff84944db960982472c2720d608dd63550a0b382344897c8a

  • SHA512

    98eb995e97bfbd65708e587d499373e58fa3d8597750af1e0a0abde1ff5ac62e3cd208a7f71ffdb56234aa629d2e97e68a72543ef9263d648e78bed19407fb20

  • SSDEEP

    12288:xe4uZzA/GFnArw0wO+4oUkM/sn1Y/tBaemIOBR7GLzw:I1zAanwwPoypTGL

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 59e66f03c2af743ff84944db960982472c2720d608dd63550a0b382344897c8a.doc
    .doc windows office2003

    ThisDocument

    wwiStartUp

    wwiShowAndHide

    wwiTextboxEdit

    wwiScanLayout

    wwiNNGroup

    wwiInsertPhrase

    wwiInsertSymbol

    wwiInsCondTxt

    wwiDocPosition

    wwiEditRepGroup

    wwiLib

    wwiLibFile

    wwiLibDll32

    wwiClose

    wwiEditSymPhr

    wwiLibText

    wwiSyncroWordWithTree

    wwiWizard

    wwiDefineRGroup

    wwiBookmarks

    wwiLabelWizard

    wwiXExportMakros

    wwiSymLOnOff

    wwiXTextReset

    wwiSetEnv32

    wwiEditTools

    wwiSaveDocument

    wwiVersion

    wwiResolve

    wwiOleDynText

    wwiDyntext

    wwiSerienNo

    wwiOleGraphic

    wwiInitLocal

    wwiError

    wwiWordXP

    wwiInclude

    wwiIfGroup

    wwiLibLang

    wwiOleUserExit

    wwiXImportMakros

    clsDebug

    wwiWord2000

    wwiWord2003

    wwiOptimize

    clsWord

    wwiFonts

    wwiInsertBarcode

    wwiStringSubst

    wwiTDTagParser

    wwiWatermark

    wwiComponent