General

  • Target

    mrkvk.ru_download.php_id=202.xls

  • Size

    969KB

  • MD5

    6621f5775827f4ace571efc47dce41f3

  • SHA1

    62fdd4d623e3457be34bfe6b85d4e948dfaf1e18

  • SHA256

    5bf929b79779161deaca45f13e9d9b87345dc50700af8e2db032a96057161af5

  • SHA512

    c5586f5a6d417ee4097e6480463572128c1293f606dc4a5769b91501522ae15cc0651df29fe47a3a513e7b8fe0003340bb4d91998a90b735cad8d00c5e871637

  • SSDEEP

    6144:ZSRAq9NErktK63Jc+eJZLNtFeEoEPMxfXO4G9T80vdvUYBXl6ATj8SvCw:M1NvALD1oEkxPsNPvr1HRvCw

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • mrkvk.ru_download.php_id=202.xls
    .xls windows office2003

    ЭтаКнига

    TSH_ET_UNION

    modCommandButton

    modClassifierValidate

    sheet_Check

    sheet_Instruction

    modCheck

    frmReestr

    modDblClick

    ProcHelpWork

    modGlobals

    TSH_TEHSHEET

    sheet_Title

    modInfo

    modInvokeHTTPServer

    modDefines

    Wrapper

    modTitleSheetHeaders

    modfrmReestr

    TSH_REESTR_ORG

    modServiceModule

    modScrolling

    modfrmDateChoose

    AllSheetsInThisWorkbook

    NamedRangeAppender

    sheet_Section3

    TSH_REESTR_MO

    TSH_REESTR_FILTERED

    modWindowClipboard

    frmDateChoose

    sheet_Comment

    sheet_RegionSelect

    modHTTPGlobals

    modHTTPServerCaller

    modReestr

    modHyp

    modChange