General

  • Target

    Work_From_Home_Survey.doc

  • Size

    25KB

  • MD5

    81ea8d26f42749cc246052fd0dee3d05

  • SHA1

    7c186a6a5e8cfa16d5bb505f0521d017d333c4ce

  • SHA256

    b28a12dce014ed7a2d3c0b7c3e9022314a208446ea9b32162111474649a81210

  • SHA512

    7828d11a77684079a2e29535800e78beb194c3470ae3713e706cad1e72f242e5b29f6fe64c4d931d0aef22a0386e1827465c8cfe3f8a9792ad7fbd270148eeb2

  • SSDEEP

    768:NmquYPwoklH3WrknvhsugQBtOduagzLX22RlzyArOX/EJ1Ozx:NyYPwtGrYGuagW2PK/9V

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office MHTML OLEObject
C2

http://trendparlye.com/wiki0509.html

Signatures

Files

  • Work_From_Home_Survey.doc
    .zip

    Password: S1P@ssw0rd

  • Device/HarddiskVolume3/Users/User1/Desktop/LetsDefend/mshtml/Challenge_FIles/Work_From_Home_Survey.doc
    .docx .doc office2007
  • manifest.json