General

  • Target

    FillDocumentsxla.xla

  • Size

    3.0MB

  • MD5

    c04e0a8245e075a3a1ee1e4983173e48

  • SHA1

    98e45bb1d33db2450ad75ee42c83a76903034f41

  • SHA256

    98aea09e6fa0164de61f54f066971d819ecf56e9d31d7c30f0b10c0d5f071bcc

  • SHA512

    e9c053e8e0462de2d80ab56055a6d4b8c00899735ac31f258370c9e69ecd6562d7b28c3655835cf83b19cc1c95a73b9bc710630f8500d1a1388aceb81353078a

  • SSDEEP

    12288:9rYx9HoN8gJ6ZeHyyGTAKWmLQHSUEKOiolT9VDTXuL59knAtbtN+FlGREkmcKI02:90yjr7mofreKf

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • FillDocumentsxla.xla
    .xls .xla windows office2003

    thisWB

    sh

    FP