General

  • Target

    2951ffba03d4395ede2bd34ca7f1e45993bdf8eb66f9b4d4d3c1eef225a8fe1d

  • Size

    318KB

  • MD5

    56d90f73e630b1b015cb8bf5608d7699

  • SHA1

    9bc22d0669f0a897e8c04e97499ec434a861d242

  • SHA256

    2951ffba03d4395ede2bd34ca7f1e45993bdf8eb66f9b4d4d3c1eef225a8fe1d

  • SHA512

    49075326d9ce460bcd2c5bcb0c25f61a3b379ce5a414a556885b52ba8a4392b036f5bb52d4b20d9d3c947042e911b2332ee519a2f47d47eb36c319a04995ceb7

  • SSDEEP

    3072:gWGT16EQdIQ4y2gC2+Odu7bRo9a9GhTLN1GXJ/dZuNJZW0LPFHFSrhF3vMh9w:gWGT16Ja1kHSrb3vMh9w

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2951ffba03d4395ede2bd34ca7f1e45993bdf8eb66f9b4d4d3c1eef225a8fe1d
    .doc windows office2003

    ThisDocument

    frmAutoCorrect

    TS_Util

    Macros

    RegOptionsForm

    TS_APIinit

    frmTS_Util