General

  • Target

    form.zip

  • Size

    780KB

  • MD5

    f9da07301d31a35765e9a11818e6af37

  • SHA1

    c5253bcb5cbb13c6d51b582ab136e5642bdc6a69

  • SHA256

    f61775502614f1d9b2d8c5bb676af25e16682fc1d28c6be1ea2d78f50e400c57

  • SHA512

    52c0bc0f86999f6eb0ee7bf9a8c12db69692ba9bfac3e1e08ce8b5cf7d230134197b61cc4729f0b153bfa40176b13d1f8e88bb679f6270590d72e8d2e3704f2e

  • SSDEEP

    6144:/kjM/ZrZPtRQhpuTec+hFF1NGJsCCmIivTF2f8bKm6zBA7FjAvxtR9NW:sMZr1YpblFHpCCmRBbKm6l02bbNW

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • form.zip
    .zip
  • form.doc
    .doc .js windows office2003

    ThisDocument

    Module1