General

  • Target

    Rechnung.zip

  • Size

    738KB

  • MD5

    c0b400f1ae6dc2521a97847b46319a17

  • SHA1

    5560d4fc5c17eceacdafa8a89e3584c41f9b7e8b

  • SHA256

    debf6217b262e200cfb89035c525a5780a937fc331698ff4b00c49be21042813

  • SHA512

    2cc749a9cb8f7700163df2f228069e08fefaf65cca755f84e2e7fb53ceba57cd0f853e7db06015faaca1086c6f0f81199c5e861399cf4374dee584dd6d833dee

  • SSDEEP

    3072:GiAfPs0tO6SniAhaT2fKCEpPMPGzcaefJxRVNlumDpTpx6m7rrInkvkfCGAa+NT9:lAf7Iv5424pUP8cLvprInzCjNjp

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Rechnung.zip
    .zip
  • Rechnung.doc
    .doc windows office2003

    ThisDocument

    Module1