General

  • Target

    e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390

  • Size

    563KB

  • MD5

    9a446553a8cb34951869fa5070ef3cc0

  • SHA1

    c3ef8ffba4fb76b98b10fd6811a2ea57726d0f02

  • SHA256

    e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390

  • SHA512

    fc2094da332d6a562e4950eab6955b3c0aedbfeaa3e19413ccb8a93ee4b0a8fcb4e0b59da269f0c7c3b4f55174ca9d0f07b1ec4c4e394771921dcb4d930949e3

  • SSDEEP

    6144:VXwYEwx9xDvRAo3Qpkv5qyN7x2Gm5BZnXiiSB81r1h9r47A:N9bA9y7x2Gm5BZXiiSB81r1h9r4c

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • e2578f937ece43e40614499cbe202bbd308bca0fcf0bb5316834a1cd9d5ae390
    .doc windows office2003

    ThisWorkbook

    Sheet1

    frmAddTag

    clsAppEvents

    clsEnumeration

    clsFont

    clsMoniker

    clsReverse

    clsUSDConversion

    clsUSDFunctions

    frmConnect

    frmReverse

    frmTags

    mComparison

    mCurves

    mMain

    mMenu

    mUSDDataManage

    mUSDFunctions

    mUSDLoadCase

    mUSDSteadyState

    mWinAPI