General

  • Target

    Invoice Number 979646.zip.zip

  • Size

    151KB

  • MD5

    5b4fed3bc9c1a1a2ad5343f1f6db5f03

  • SHA1

    fbad99035288bf1c3baf704fff9b2c0765295c94

  • SHA256

    96912bdc44215d8d228e66c2d16809643a70e0f9ff64b13d1881b5befee7c0ca

  • SHA512

    5408c04e6bf1d5525cc5474eb8f05c054cad516f445a3f6a24ef9a3cc40f780171b899c25c33a0eaf8628024d633bccc7780b39213e673e431d8c64abc8eabb3

  • SSDEEP

    3072:2ieOh/sxyjcv6mpi1k/HWLaMaRu/9WNL6ZYOTfx:/eOhkE4vRWuWOM7/sNGZp5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Invoice Number 979646.zip.zip
    .zip

    Password: infected

  • Invoice Number 979646.zip
    .zip
  • Invoice Number 979646.doc
    .doc windows office2003

    ThisDocument

    Module1