General

  • Target

    a685599241e650f81a7e270dd00628a342f2b05d9d6f7e5015afaf75a7cc4a4f

  • Size

    2.0MB

  • MD5

    f2d03467de8128f4dc1de9bf0c6ec7bf

  • SHA1

    0cbcf8be38dc8b4bd9edb66cbc52514a3d2520b9

  • SHA256

    a685599241e650f81a7e270dd00628a342f2b05d9d6f7e5015afaf75a7cc4a4f

  • SHA512

    41b2fc780a123a32db0d7c67c49c1be2aa181b992a2992ca06cf59351ce46aded154cc909ca9e8821b8feba540015a7ffae6c4568d1e502e271852e3be638d5c

  • SSDEEP

    24576:XBQ+CNSoUjuTNPCg7uO601iDcydGHkn0/ie/4+uY3ZsNttjj2Ndui:hCN5UjSKgXzBEs/

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a685599241e650f81a7e270dd00628a342f2b05d9d6f7e5015afaf75a7cc4a4f
    .doc windows office2003

    xlsBook

    REESTR_DS

    cHandleEvents

    modInternetConnectionState

    frmReestrObj

    TSH_et_union_vert

    modUpdTemplMain

    modHTTP

    modfrmReestrObj

    modServiceModule

    frmRezimChoose

    TEHSHEET

    TSH_et_union_hor

    modGlobals

    modDefine

    modClassifierValidate

    IMessageWindow

    modScrolling

    modfrmReestrMR

    modRegion

    List00

    frmSchemeIn

    modHyp

    Wrapper

    TSH_REESTR_ORG

    modAnimatedFormsGlobals

    AllSheetsInThisWorkbook

    frmReestr

    Instruction

    modUpdTemplLogger

    List05_13

    ListComm

    frmGroupCons

    modReestr

    modfrmReestr

    MessageDialogue

    List05_10

    frmRegion

    REESTR_VT

    modProv

    modThisWorkbook

    modfrmCheckUpdates

    modInfo

    frmSheetReference

    frmCheckUpdates

    modComm

    TSH_REESTR_MO

    modCheckCyan

    frmDateChoose

    modfrmDateChoose

    frmReestrMR

    modInstruction

    List01

    List05_11

    frmAskCount

    modList11

    REESTR_VED

    List05_9

    List11

    modListTempFilter

    modSheetMain

    List02

    List05_5

    frmValidationInProgress

    ListCheck

    modList05

    modfrmRezimChoose

    modList03

    List03

    modList01

    REESTR_LINK

    modList06

    modList00

    NamedArray

    List07

    modList07

    ISAXHandler

    clsUpdater

    modUpd_Templ_Caller

    modUpd_Templ_Defines

    modUpd_Templ_HTTP_Request

    frmHint

    List12

    modList12

    TSH_REESTR_MO_FILTER

    List05_2

    List06_1

    List06_2

    List06_3

    List06_4

    List06_5

    List06_6

    List06_7

    List06_8

    List06_9

    List06_10

    List05_1

    List05_3

    List05_8

    List05_4

    List05_6

    List05_7

    List06_3_i

    List05_3_i

    List06_13

    modList02

    List05_12