General

  • Target

    Please send copy invoice.zip

  • Size

    670KB

  • MD5

    4ff9ed1a145238fdccfe822237eae3dd

  • SHA1

    7ecb6366dc68c3a452cd6b6d5f6da7e1aa004078

  • SHA256

    7e592c7cbdeb6497c8c1e24224c124f953065ec87e4e09d03ee4716215f42f59

  • SHA512

    a6b934c6599c48becbf31681b59491e7092963c5a8b9438be23f5a8f65f5e94ac40ee3471e29cf30eafa68446d9446b884d89044285f2f4e3ebd5c98577e77b0

  • SSDEEP

    3072:ITdhlKitY6gngARvVndTW9ZCPuJSDCKvjl1flV+crxAm40/yL/sEZGNKl/l:QhQOY6egwndgkPwSDCKFVj+mb/yFIs/l

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Please send copy invoice.zip
    .zip
  • Please send copy invoice.doc
    .doc windows office2003

    ThisDocument

    Module1