General

  • Target

    mrpro517.xla

  • Size

    5.4MB

  • MD5

    628812f5751d7cbabc97d6dabba711da

  • SHA1

    5a096720b0c32437238112127a127d2f140bc0d6

  • SHA256

    a16392bafb0087573a23e61a8b6718d799e9e035d727b8480e6ef17a1f3a1e35

  • SHA512

    41fbc125fc44a85947dde8eb0fa54395af6423989fd1b8d87b562e11f86cdb60a3af63fbb7c71ee2e309e5b8538632ef0ba65b696ab886d64ffeab566c4237e6

  • SSDEEP

    49152:rtsdQchJH/39jpO5H2xOxVnyHfv7Iia8MeuKtOrUbnHMIlf/G0RD:pUTXHkfIl3Gi

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • mrpro517.xla
    .xls .xla windows office2003

    Sheet1

    Sheet2

    Sheet3

    ThisWorkbook

    Module1

    Module2

    Module3