General

  • Target

    981ed92e6305f88f8d5760d9d400deff.xla

  • Size

    1.1MB

  • MD5

    981ed92e6305f88f8d5760d9d400deff

  • SHA1

    80c9da43abc1185ca9faddd565504e7a2531fc04

  • SHA256

    cf21151adac0ccb8873bb29176cecea7e1271d9fe1f463127eb5d223b2595a1d

  • SHA512

    f5ac065e99eb64e97ed0262adf6c412145bba24e81a4ef2e630781fbbdfa39b73c4bed4b669cbbc3d3bf3ff4c7e7cb3c3e248efa848bdc2e9c51609634b4647f

  • SSDEEP

    12288:PrFSMkMFgUYz36nzCUs6GJFEGmed9w6B34AMZwk9b7FDXMdy7B3goZ57:PrFngrz36zyrRD3JcwO5X9t

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 981ed92e6305f88f8d5760d9d400deff.xla
    .xls .xla windows office2003

    SheetPreCalc

    ThisWorkbook

    main

    registry

    version

    SheetCD

    OS_Version

    SheetVersion710

    SheetVersion720

    SheetVersion640

    support

    SheetPC

    ServiceStatus

    SheetVersion730

    SheetVersion740

    modDigitalSignatureExists

    modVerifyFileSignature

    SheetVersion750

    SheetVersion760

    SheetVersion770