General

  • Target

    1e993ef7ee5f21b9f815ebf853b0bd40d3328a1bd6d680ffc3ace55e4bf73a89

  • Size

    222KB

  • MD5

    c64202fc6e89fc1c49cde536894ed99d

  • SHA1

    23910d0cc03cfef9acd0cf08b0f19852e7d10c87

  • SHA256

    1e993ef7ee5f21b9f815ebf853b0bd40d3328a1bd6d680ffc3ace55e4bf73a89

  • SHA512

    25985a2b81c389aedfd8c5e6c63d1f8fc3c3404799fbd295e902d8dd913c6b4bf2fdc479d374b7dc8ac91c29b9c6be25d9cb0e7decc204f51cb841861745fb98

  • SSDEEP

    6144:wxEtjPOtioVjDGUU1qfDlavx+W2QnWxuX+Fayp3oITIvuTUFSW3EUvNx:wlFaMYITITIW06Nx

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1e993ef7ee5f21b9f815ebf853b0bd40d3328a1bd6d680ffc3ace55e4bf73a89
    .xls windows office2003

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3

    safrolssynthesp

    jeererlistserv

    delicatessensan

    cavalierishpico

    monitionmarshal

    acroteritaliani

    chinarootgiftwr

    angelfishladett

    phlebectomyshiv

    octantsubducedc

    condolementover

    estheticallysug