General

  • Target

    Iranbggaiajfbi16_edrXls.xls

  • Size

    97KB

  • MD5

    639f83fa4265ddbb43e85b763fe3dbac

  • SHA1

    ab0a5fb23274821a2307cf47da3843b50a96b461

  • SHA256

    dc5920167ae07effa4cb616dccdbafdce9fa5287dbdcd5ef8a9882847376962e

  • SHA512

    69dbef69ff528a5acbcb31e6ceda4c7b2221a36512ab4e8eb46970bd153e7104a712d97e289cfd71395451a7fb3697712a1dd76d34688c682a6c3804157f0e22

  • SSDEEP

    3072:GCTcmOJYCCTcmOJY0k3hOdsylKlgryzc4bNhZFGzE+cL2knA5nxSL:7kJKkJbk3hOdsylKlgryzc4bNhZF+E+X

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Iranbggaiajfbi16_edrXls.xls
    .xls windows office2003

    ThisWorkbook

    Sheet1

    Module1