Resubmissions

09/03/2023, 11:19

230309-ne4lksba4s 8

09/03/2023, 11:14

230309-nbywxsca72 10

09/03/2023, 11:07

230309-m8a1paba2t 8

09/03/2023, 10:57

230309-m2ncfaah7z 8

09/03/2023, 10:43

230309-msec6sah31 10

General

  • Target

    Herzog Heinrich.zip

  • Size

    785KB

  • MD5

    bb3459e50fec633cb6abe29a6c131333

  • SHA1

    0f360e6d34855a220a2a6b73a19500e85914ade5

  • SHA256

    424075cd6300b70707c822e7ffd9f9ec3038ce2e5385b989642e5ba9e9ed4a06

  • SHA512

    b3f8981b9f0bfe1a546675bb76ae1b5659f73b8fff044410af60310c7c10b9b9827a84f2582997de70728d48bc3195a4608deb01a8ce6b6ebbdb4ccc25b0fe03

  • SSDEEP

    6144:dkjM/ZrZPtRQhpuTec+hFF1NGJsCCmIivTF2f8bKm6zBA7FjAvxtR9NM:aMZr1YpblFHpCCmRBbKm6l02bbNM

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Herzog Heinrich.zip
    .zip
  • Herzog Heinrich.doc
    .doc .js windows office2003

    ThisDocument

    Module1