General

  • Target

    malicious.doc

  • Size

    168KB

  • MD5

    53734ca399da5c4d5cf5d365c4f9a0ab

  • SHA1

    f3059e3b29474051033ecf4efffb4015b4a25040

  • SHA256

    2407e90893f016d9ed760ed7b9ff5f89f542179af7229fd5c915b81a65862a62

  • SHA512

    27ac02db04b74487906c3ff74f1a9ea82f96b046e5ba387f63d0083f596ad547aafb44847885a3ca39d82ca4729d586ecc1f6833004869cd6498830be5c3eb9b

  • SSDEEP

    3072:Q0WVcyk7tzU4KoVDlaLNxBClQe5LzvyEW3q58c6D89Cmg62o+9m:xWV3k7lxKoVDlsNxBCz5LzvyEW3q58hQ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • malicious.doc
    .doc windows office2003

    ThisDocument

    Module1

    vbFrmJItF2066

    vbFrmsileXFNK4416

    vbFrmjcGorNV1596

    vbFrmgrXRfyaZ3672