General

  • Target

    Xinyang.com.zip

  • Size

    639KB

  • MD5

    1e99520cb445d8468859f9544bc9c0bc

  • SHA1

    4e180460a8b53d8d7b759eec21e13933c97997b9

  • SHA256

    bea8c98ae827f7f8985818cf0204c918743230e6ad0d2172ce8e9e5063b427da

  • SHA512

    2f7c003fb44c17d54d07c88788713887704d9f7b00f83727b108adc25e492e8927d2020bf4ff18b89bcd52f97689d0e6af10c02a90850823ad8644989b198928

  • SSDEEP

    3072:jcJ4Y7C2UYBbenRoTwWAvuN9nyEeTHuhluAQ/RrrLZNQxBlGT40F7:4SgC2U4QRfr4nyEsHu7u3rrglb01

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Xinyang.com.zip
    .zip
  • invoce n 599860 03_2023.doc
    .doc windows office2003

    ThisDocument

    Module1