General

  • Target

    SABLKAE2.xls

  • Size

    160KB

  • MD5

    f4fdcb67b313d668780aaa9a67f96ded

  • SHA1

    93f4e88ce0dfacc3345dec862478e225525b7d70

  • SHA256

    0383eb1a8ec03fcb3bf7c4d734d129106f822a1ba1e725b9bb34062c7bfa34b3

  • SHA512

    ef98aed0a5823b40ce5fbe52e0d80c864323452b7bfd66d74874ec136b81dc5559feb7546ed9b7524e6a0317da79422ea4b7b84e6cf3ca7ca0b787d025fd68c7

  • SSDEEP

    3072:ExYLAYiRUBxm2UDvZSvfjCGnsOCLF+LR0otd0hme/NBOODkgeUdMBAXsPIcD4dMF:MYLAYiRUBxm2UDvZSvfjC0sOCLF+LRqc

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • SABLKAE2.xls
    .xls windows office2003