General

  • Target

    legit.zip

  • Size

    12KB

  • MD5

    fa8de42f0566729c8152f8e4b144d4e2

  • SHA1

    80b5fbd1efc4cbaeb69c967a663c06890ab225b3

  • SHA256

    bd0db5eec0c550d05423f464bb43103f28e9016a574fb8439e42e0ac84d3861b

  • SHA512

    2d70df8722f5c08d6d5190773982545b956c4f6332d702b221b52e5b57bdbabe4097a7a6f766eb6c9bbdd95a4ec03275ec550c005bdae35d6d0da4832535fb0b

  • SSDEEP

    192:lO8L4cWF3CM9qdnFXh0dmaeDCOSM1lh6MAFW2vN/pOlVlI0lXulOfTs8h2rN:lOA4ci3HoXhVaE0deaWeIRh2h

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • legit.zip
    .zip

    Password: M3taCTF

  • legit.doc
    .doc windows office2003

    ThisDocument