General

  • Target

    tragedy_redux.7z

  • Size

    21KB

  • MD5

    4fe5592cc422e85b0d6634680dbb3741

  • SHA1

    b4d147e1dd2353b04e47cbe9b6f5cf2748e33acc

  • SHA256

    e886ba9523bb2a917c0ed44510416ef8abe27fd72ae5e742856f728bdbe52bec

  • SHA512

    8b79b03b5b1102252fd03ca0f66007394af8d5d4c3f6dd0bf390bcd23eee51ed503559ff8d0d94310ff33e42f175f813f3595503bc5a32be06919c4d23667017

  • SSDEEP

    384:ZZd4FeIkU6oyLQb4HM05ZrsNSICWwdlh2Q19sPI0P2eLx2PyoTyTK5iYEhw4V:6FeI9/yRj5mNxCWMlhD9sDPhsPyo4KY5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • tragedy_redux.7z
    .7z

    Password: infected

  • tragedy_redux
    .zip
  • _rels/.rels
    .xml
  • docProps/app.xml
    .xml
  • docProps/core.xml
    .xml
  • word/_rels/document.xml.rels
    .xml
  • word/_rels/vbaProject.bin.rels
    .xml
  • word/document.xml
    .xml
  • word/fontTable.xml
    .xml
  • word/settings.xml
    .xml
  • word/styles.xml
    .xml
  • word/theme/theme1.xml
    .xml
  • word/vbaData.xml
    .xml
  • word/vbaProject.bin
    .doc windows office2003

    ThisDocument

    NewMacros

  • word/webSettings.xml
    .xml