General

  • Target

    64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188

  • Size

    639KB

  • MD5

    7a39eed6aa116cbefb4e5dfaf40136fb

  • SHA1

    1a811d7ab00d1185eabd580bf82c1f576e1c41fe

  • SHA256

    64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188

  • SHA512

    5900615377032ffa2d7d5bf7b38949eac178a557f8647140141352b46f667845efe18835d09884d76206e42b3bf084852d5ae3ba8ba3e6d790ed5e568777b7ec

  • SSDEEP

    12288:EgcTEIkT9BDeb0omzgcU0dqYSrUIrklvPU6Il5KfKo2fa54OgJFoiDYr:I49Zomzgc7dJSrUIrYvcv5KSo2S54OgC

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 64285763b4c4aabd830e76b400cf99ce6a696e11f6dbf1514f93157539022188
    .doc windows office2003

    ThisWorkbook

    data

    overeni_dat

    functions

    frmForm

    helper

    SAP_helper

    data_zaloha

    frmKalendar

    editor

    frmUvod

    frmSplash

    filtr_datum

    SAP_helper2

    wsPRINT

    START

    NABORCICI

    clsVyplata

    frmNaborcik

    frmVyplata

    temp

    frmPass

    login_check

    role

    frmNab_detail

    filtr_datum_2

    Module1

    DtPickerInterface

    Calendar_1

    uFormDtPicker

    SAP_helper_2024

    shtDatabaze

    WS_ASEP

    Module2