e2ea080eae95c122ac52d2b0bdaa7ae3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2ea080eae95c122ac52d2b0bdaa7ae3.bin
Size

100KB
MD5

e343eed597ab9cc8505c7b4303716f54
SHA1

64e6697c11089ae134eec14bb92f35cdcc4a310f
SHA256

4591df2d0cd9bfd8e0cc6130a45905575febd6f03e55fdf8e2d8bc6190251749
SHA512

536b2291903a46329e2ad75d5db97cff1c277763a13ef306fc7acfdb4ecaf78f38981469ff90a6683af2ea5dcaa84b7ddae74cd5f94ef065070b0df92a586cb1
SSDEEP

3072:JWTMnkyt+DL2sw9mUQLBHDaRA2SSWP3ZlKh7YY4:MTvTDLPwwPBHMSS6zY7Q

Score

8^/10

macro macro_on_action

Malware Config

Signatures

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

resource	yara_rule
static1/unpack001/40431e3ed51b38051e6bbb7d148ab467a016d7776b2143c64aa158bcd3195923.xls	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
static1/unpack001/40431e3ed51b38051e6bbb7d148ab467a016d7776b2143c64aa158bcd3195923.xls

Files

e2ea080eae95c122ac52d2b0bdaa7ae3.bin
.zip

Password: infected
40431e3ed51b38051e6bbb7d148ab467a016d7776b2143c64aa158bcd3195923.xls
.xls windows office2003

Module1

ThisWorkbook

Sheet1

Sheet2

Sheet3