General

  • Target

    1ab238c1d351dd959ac2b1ae6ab1eb657e31d73bf639c884b13d6074007c0a84

  • Size

    126KB

  • MD5

    0d2d3344b79ea861f6911ab096661e69

  • SHA1

    5b752bfb592d8d821dcb5504dfb09e0156230f1b

  • SHA256

    1ab238c1d351dd959ac2b1ae6ab1eb657e31d73bf639c884b13d6074007c0a84

  • SHA512

    e1a2d1b9c937fc4e0bac490ce32812583e9c6ed495ab60c48062cfee3ae944761265fe1b2b85eb2e3d16d89d45275e7abcdfcf2699f7d0589b3155cbe99af918

  • SSDEEP

    1536:lCiZb0RGnBkw+Ag+54UhvwtpnnzqFwgeXQ8iPIPscGA0uwS8r:lFb0MnBkpAC8YnzqFhKkMs7uN8

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1ab238c1d351dd959ac2b1ae6ab1eb657e31d73bf639c884b13d6074007c0a84
    .doc .vbs windows office2003 polyglot

    Module1

    ThisWorkbook

    Sheet1

    Sheet2

    Module2

    Sheet3

    Sheet4