General

  • Target

    bip.poznan.pl_public_bip_attachments.html_co=show&&id=93691&instance=1044&lang=pl.xls

  • Size

    624KB

  • MD5

    7b3f6c8eddbbeb2a5e6a9712663905b8

  • SHA1

    7882ec6a9bb97a5f6c6b30d91b325f2bffc33727

  • SHA256

    a668da8e561f5947a334578067e6f2340af372fe5c4d1d6cb693acf459405755

  • SHA512

    27432659d792eae0493d6a6883862c41fe69d2639c121afdab0311bde6a82df37a23ceeb6870425719819f550a6ac59d4ac427f21275f47a526e353494416fed

  • SSDEEP

    12288:7aX8WOHHLzBfHZVEUZmIGZbDQFP7hBBucUhLU:UGxHoIGZbDQFj8cUhLU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

Files

  • bip.poznan.pl_public_bip_attachments.html_co=show&&id=93691&instance=1044&lang=pl.xls
    .xls windows office2003