General

  • Target

    f1efceddc6c8872492b6a1b6ee297cb434475bfa42c5588cd769af0f786fd943

  • Size

    1.4MB

  • MD5

    e48336ea9fbd613e5f5fab4c3fb52d57

  • SHA1

    58ec177f3e80ac9a8a4d642f4be9d2a1689628f3

  • SHA256

    f1efceddc6c8872492b6a1b6ee297cb434475bfa42c5588cd769af0f786fd943

  • SHA512

    ca709e00ce8e2c4330a2638dc7951d3a7d5f66a786e5e0e9e1f28754e5c9892d6b0bc632573264c336b2a9d82ec5e556b4a89caa2bc76f88f4c7080f4beadc5a

  • SSDEEP

    24576:5nYf5sE0zh80zfndNVeUKpcz7JY5/PlFVMWtZnMQQ8bmR0UOe/r1YCz:5m5sEs/zvrVeHqYXwWHM78bmE4eCz

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f1efceddc6c8872492b6a1b6ee297cb434475bfa42c5588cd769af0f786fd943
    .xlsm office2007

    ЭтаКнига

    o0000111100110101100

    o1110110111101100000

    o1000001001000010010

    o1100000000010101000

    SHINSTALL

    o1110011011000000000

    o0001011111110101010

    o1010000010111100110

    o1110001111000010000

    o1010010010011001101

    Лист2

    o1010111110111000110

    o0111111100001001001

    кнопки

    o0101001110000010111

    o0001001100100111001

    o1010101011110101010

    Module1

    Module2

    Module3

    Module4

    Module5

    DPB