Overview

overview

10

Static

static

8

ef119f32-0...b4.eml

windows7-x64

6

ef119f32-0...b4.eml

windows10-2004-x64

3

LIST_SUT_0...23.zip

windows7-x64

1

LIST_SUT_0...23.zip

windows10-2004-x64

1

LIST_SUT_0...23.doc

windows7-x64

10

LIST_SUT_0...23.doc

windows10-2004-x64

10

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

image001.jpg

windows7-x64

3

image001.jpg

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef119f32-07ea-93c3-438f-611cc49c37b4.eml

  • Size

    955KB

  • MD5

    01e088cc9e44aedf1cbee07745c4230e

  • SHA1

    953c14da1788f35a6d3e2d747cec23dd9066f06b

  • SHA256

    411eee12d902ba4635682f68b6f9a08a805bad1925a4a4c016fa5cf6ffccf368

  • SHA512

    b8f470650dbf69744a3dc1a3d10553c3e41e4c8f360998337c879ef38214d654c1c40da2790244dc49cc51f7d5a3de28a44daddb746dc11503d9848111b22595

  • SSDEEP

    6144:9GD3/mLnDP9xMMeBp71mTLKxC3JUPTEOOSRvZYJrNG8mf:9aGnDBQB8h5UPTvdmhGL

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • ef119f32-07ea-93c3-438f-611cc49c37b4.eml
    .eml

    • http://www.nityo.com/

    • http://www.nityo.com/Email_Disclaimer.html

  • LIST_SUT_030123_NZS_030823.zip
    .zip
  • LIST_SUT_030123_NZS_030823.doc
    .doc windows office2003

    ThisDocument

    Module1

  • email-html-1.txt
    .html
  • image001.jpg
    .jpg