General

  • Target

    5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.zip

  • Size

    318KB

  • MD5

    d94efca34e9052c4d859abe48aaa9811

  • SHA1

    96efce41004288240e512aa46165523d283d8b8b

  • SHA256

    9b134b8b578a09bc08f5b080a80be45c8bb0af38be72025fc92f30a91c0fccdc

  • SHA512

    73f4601080e20452fef5fad1c3914f3109f7707f8ae6c6b7e1052e8e675db44ae2c7cb3946798dfc69cc8715d188d498f5d1bff77f4dfb2be88d6629a1d4801a

  • SSDEEP

    6144:3HSL9QPW/ZXHHbzCuLkwgqhKNGphJfLlUj6S4RWI9P7RJQq:CL9QO/ZXXXp1KNGDJfEv4RWIJ7bD

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.zip
    .zip

    Password: infected

  • 5dca7f9161d19585ac8954a06a6ef3df81ef304f4a36b322b64fbb806e8d3bb5.xls
    .xls windows office2003

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3

    Module1

    Module2

    Module3

    Module4

    Module5

    Module6

    Module7

    Module8

    Module9

    Module10

    Module11

    Module12

    Module13

    Module14

    Module15

    Module16