General

  • Target

    09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip

  • Size

    149KB

  • MD5

    e998d2eb86f259f21f0c0dbf07eb6039

  • SHA1

    5c6ceb41dcb4c83f992da37ef5dd98880de6c3d0

  • SHA256

    4c9f516f0cf8a7a696f359ccfeeda13bdc4432fec1eb2f2e2ba7d0680607c1d8

  • SHA512

    8d49a73358d21927f17955c45bc9a705fad9b6813c4dec4fd007a8bea7bf39cffeeffb883d9a1ef7e3ef187603c4b795b4048c4d6c1c8abe848ec67ef42bad3e

  • SSDEEP

    3072:4qoaS0iW7i3rw/jgBVylZ+sV6+xupMiYEPDmVlhm7peaQ04Znuao:41dWm34j40Z76+xuzYcDmj9lnQ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • 09389a18b5464aa25c4029351e5fbf22e4dfff309cc08cc6f4b6d5d08a341bc2.zip
    .zip

    Password: infected

  • Rech.doc
    .doc windows office2003

    ThisDocument

    Module1