General

  • Target

    73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1)

  • Size

    250KB

  • MD5

    fa8e89efe8783469d68a30faa2928c5d

  • SHA1

    e79e4920a01ac488f4d3feaade79d44606e22833

  • SHA256

    73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92

  • SHA512

    726eb6a369ce1b702913e79bfc745abce5a4548eb83a13e3962d8dae4ef22ae3c5a96eea8bfb826c1fa310cec965ffb24c98413e16ecbb7eb8547f2e55ae0b12

  • SSDEEP

    3072:HWO6HtvWmstxJ/yAB9CjwGya4FhVAMeT8JGsrE2yurZBQU4YNWbfZu/TJPSQY9QZ:2ZHxWDxJPfFFgghLkN6JP3YLgOG5p44

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 73a0b0b8ecefa3cf572c2194d12609d972a72b7a8a32803317bb0f80bfe0ef92 (1)
    .doc windows office2003

    Password: VelvetSweatshop

  • decrypted
    .xlsb office2007

    ThisWorkbook

    mdljpc6cvk

    PRG

    HOME1

    P2

    RF

    bDemoTour

    AXLactv

    Sheet4

    AXLmenu

    Sheet8

    HELP1

    AXLmod1

    Sheet6

    BulkPrtM

    CellFtM

    SlipM

    AXLmod2

    Module1

    Module2

    Module3

    Module4

    mdlixkxyn0