General

  • Target

    480df7323f98c30e5115067e89ac59b8

  • Size

    843KB

  • MD5

    480df7323f98c30e5115067e89ac59b8

  • SHA1

    76296078213f20991873c554242417c1acbc66ae

  • SHA256

    1c8451931e7e259e80d4096f849acbd4dbc7d950cb1249f2ea8ca1094465da30

  • SHA512

    d04aa9358e4b3156b3b9bccb5fc5693e6b57ea60a8eceae757f06f1f93db7d9d075805a724c7cd87fd8f75d5b539095cc3c05c3611a6606e170771b7675b62ea

  • SSDEEP

    24576:VfBAr6+3gzcKTh9N41vGRw6uHywSc2RwHHDAXmC644jHrL8eRtU7ICVdqrg98vx0:BBxU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 480df7323f98c30e5115067e89ac59b8
    .xls windows office2003

    ThisWB

    shtr

    mod_CommonFunctions

    mod_Main

    mod_Functions

    F_Progress

    ProgressIndicator

    FWF

    F_About

    mod_Lookup

    mod_CheckFunctions

    SpecialControl

    AddinSettings

    F_Settings

    Fchar

    mod_Translate

    mod_About_NEW

    F_FirstRun

    Module2

    Module1