General

  • Target

    DOGLAA09299.zip

  • Size

    1.2MB

  • MD5

    9ebf675cce1ca4a932bff1776ed9e845

  • SHA1

    ee78341e9f6aa92df91b857fef34640980cae53b

  • SHA256

    4d06c1d981fe3e69f753774b7c417fc8e0267eb8195281a2c7670bde242baa16

  • SHA512

    2738f75adea44c291e6a80f56e1aecafb56a3a0ab98adce66a35672507db5fb6f3d28cbb50c1455d5155bcda579866549d36eb7d0a8cc50d0e3120c53b0420ef

  • SSDEEP

    24576:ut5M+LRdupmymGLhl0PbtGzmXYX6Y4gQ0I7i0jC5qov/CWob:o5/1+m6hloYLX6T/0IL23ob

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office MHTML OLEObject
C2

https://kasangatitc.go.ug/haze/hot

Signatures

Files

  • DOGLAA09299.zip
    .zip
  • DOGLAA09299.slk
    .xll .slk windows x64

    3a21fabd53784892a72d4a24ea8cd2d9


    Headers

    Imports

    Exports

    Sections

  • DOGLAA84299.xll
    .xll windows x64

    a674f498593ea2acfaf14ccfdaff1d87


    Headers

    Imports

    Exports

    Sections

  • PO#220025.docm
    .docm office2007
  • PO#220067.docx
    .docx office2007
  • PO#specification803.xll
    .xll windows x64

    a674f498593ea2acfaf14ccfdaff1d87


    Headers

    Imports

    Exports

    Sections

  • PO#specification891.pptm
    .pptx .pptm office2007
  • Sample#573.rtf
    .rtf
  • otxnow.dotx
    .dotx office2007
  • pptxnow.pptx
    .pptx office2007