General

  • Target

    09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip

  • Size

    149KB

  • MD5

    2d2c8eea29e978e8228e89f923160a2c

  • SHA1

    381ededbf02e77087a38de9b65522de1b8fb8471

  • SHA256

    163e6406e875ee099ce97c7d73cc7f3b80e8140e441857947cad8acad8d392b0

  • SHA512

    8bea3796e48c67a1f4335006da08bdfe4ff80e2c122dd75092f2fe94751ad6a5de8e5d2ad6b054e9dc468bc0f7944a3dfef693ece37a86ec809cd6b26664eb89

  • SSDEEP

    3072:CEsdT6Mbbuwdnat5hg2biCSjj9U1ILWMF15Jth:CEsdT6sxn+e2b4H9bLW015Jj

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • Rech.doc
    .doc windows office2003

    ThisDocument

    Module1