General

  • Target

    09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip

  • Size

    149KB

  • MD5

    76b535f262ac16d3aee9a110ea0a955f

  • SHA1

    3e865701de6fbadac00d5a002837b360085935e9

  • SHA256

    b69698792501d2a31e47291b45937f3da829b88b5629e5952bce48a639c597bb

  • SHA512

    fea3ae9283684643148f80dbcd622e343da3737ed0608c315cea0341397d777eb7951916176fedbb74030600f23b637e37b1ef54f7d3c5e2f6ac86e3e3a9ca41

  • SSDEEP

    3072:cuPatY2uliGrR2rf2HzSFnkhLjP/gf+TRbJ3usSmFX9e/cm7p2MnQgwpe:cuPRBliuHmOtkcbJSINu7B

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • Rech.doc
    .doc windows office2003

    ThisDocument

    Module1