General

  • Target

    tragedy_redux.xlsm

  • Size

    23KB

  • MD5

    3abfa64598fb01ce7130bab6f24d4ea8

  • SHA1

    a1d8f1e0613286f279506a1fbd1bdb75c2f27ecc

  • SHA256

    f03e0df31b16d4dd954918c496a24107c69a6468be1f2703fe56ef1f91118e47

  • SHA512

    94340fbf262d32177c94f39ca4e1985b457508ae80ea361341640f1d396f883d65a31b220966ee86a111dd14b79076dfabf3e9967cfa9aa74597439c875489ea

  • SSDEEP

    384:NiLBYSEK0YBM2oK1KUs1IdXJCtmqpwcdSDat2aEkRmhudj/hv/6iMLPj4:NkBYDYM27A8XJC8qpwcdSet0up/ZSiMQ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • tragedy_redux.xlsm
    .zip
  • _rels/.rels
    .xml
  • docProps/app.xml
    .xml
  • docProps/core.xml
    .xml
  • word/_rels/document.xml.rels
    .xml
  • word/_rels/vbaProject.bin.rels
    .xml
  • word/document.xml
    .xml
  • word/fontTable.xml
    .xml
  • word/settings.xml
    .xml
  • word/styles.xml
    .xml
  • word/theme/theme1.xml
    .xml
  • word/vbaData.xml
    .xml
  • word/vbaProject.bin
    .doc windows office2003

    ThisDocument

    NewMacros

  • word/webSettings.xml
    .xml