General

  • Target

    2f39fb69d56d76216214d1153.exe

  • Size

    1.3MB

  • MD5

    f29dc1ffe7812ba0e9268be514887f13

  • SHA1

    d6e155467053d21f2834a2e4e626fb2deb6bac10

  • SHA256

    2f39fb69d56d76216214d11534c76385c7e0a80bff3187e77fdc6de00fb950c2

  • SHA512

    1e55e8352858b1dbf8a72f3149875b0fc81626430dedf96e74117b4bff2c2ccc2021bacf9cc287146b242191fb2329c5b9e4c3abd89366eb480f758d94f6eef1

  • SSDEEP

    24576:ZJZS13mbCL6jXccW93+6+z2FaPIS9BnEe9iTR905sD96Db8MZS8DQHEcOhGdC9QB:zZSjDY

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2f39fb69d56d76216214d1153.exe
    .xls .exe windows office2003

    ThisWB

    mod_TestProgram

    mod_CommonFunctions

    mod_Functions

    shtr

    F_UsageExample

    mod_Main

    mod_InsertFromFolder

    mod_InsertFromLinks

    AddinSettings

    F_Settings

    F_Preview

    ProgressIndicator

    SpecialControl

    mod_WinAPI

    mod__NEW_functions

    shh

    mod_DeletePictures

    mod_InsertSinglePicture

    PictureProperties

    mod_AdditionalFunctions

    mod__FindAbsentPictures

    FoundImage

    F_SearchImages

    mod__ExportPictures

    F_Export

    F_About

    F_FirstRun

    F_Progress

    FWF

    mod_About_NEW

    mod_Translate

    mod_Punycode

    mod_WinAPI_New

    vbaClipboard

    vbaClipboardFormat