General

  • Target

    UPDATED ORDER.docx.zip

  • Size

    7KB

  • MD5

    d470a79f079cb5b9facc1d39616f1c7b

  • SHA1

    8b509770aa35b97e15bc6c52d722348bd123adc2

  • SHA256

    65e6187f39c04791495ee9f6ab7789e14d8af67cc60f46e3f4ae645fcd1e3745

  • SHA512

    e830f2b754ffc0a42c629cd08d158493306234db30277963b297ed81729492cfd92abe5512ece5d543e00faa67bfb07f4a1007eb4f1b397a317e8d8632c0eb49

  • SSDEEP

    192:toz4wfx7sWM7Ziu5rr4pYJqBd/bWuImgHL6HKY06w4tkIhOd:i4Ix7sWM7Zdr4UiNlTgWq14t8

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http:/QQQQWWWWQWWWWQWWQWQWQWQQWQWQQWQWQWQWQWQWQWQQQQQQQQOQQQQQOOOOOOOOQOQQQQOQOQOQOQOQOQQWWWWQWQWQWQWQWQWQWQWQQWQ@3118348624/O_O.DOC

Signatures

Files

  • UPDATED ORDER.docx.zip
    .zip

    Password: infected

  • UPDATED ORDER.docx
    .docx office2007