General

  • Target

    dridex.doc

  • Size

    745KB

  • MD5

    8566c9b1e8b18b0f23cf21ca5f2d5daf

  • SHA1

    c2cb93f523536858ea982e278ed045cb5a10b85d

  • SHA256

    203d96d270e71e85cb48f51c91897d30193d65680aa8da0c3fa1547db0eaa615

  • SHA512

    90b1cd89286bb74f4d8e1ff06b9b4f322b40f023be9e393a011dc45203736cc840add3348210baa1b4f2b33013c45ecfcecf4f5b5bc2f9f12f2112b98839cf44

  • SSDEEP

    12288:oBbfJoh59mnEXCjgoZGk+8meFn9wQz33j1JoX4WFM4BvbqmXE2BJqxKzZWSLo4:Ob+hDmgCjglKmeFnGO3j1Ja4qbquZvFT

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • dridex.doc
    .doc windows office2003

    ThisDocument

    bookbinderyandr

    leewardlyouthom

    burlergugletmam

    revaluingturfie

    luaupais

    scarfskinsbrook

    lexicologistsdo

    precedencydolos

    avatarstipa