General

  • Target

    d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9

  • Size

    30.9MB

  • MD5

    c6f6f2538ad1eea24d9c0fd820a91f16

  • SHA1

    cfb78614644cf7a7c3a88e1f9c11ef3b37ef33dc

  • SHA256

    d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9

  • SHA512

    b1f3967fa8c01c9f41af519663913c793640d021797cca92e6c9e074da59e10f27e5b733160995b6e7fa8c15c8dd1404fade1c9544ce27d7be2deba027e95e92

  • SSDEEP

    49152:OtI7KZh1XatFfINl8iNGbKjPqj/xC2I2gZm:OrZh1X8wNlVFPqjY92g8

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d1ac24fe6d7320c30ea4af2b81dfd19521c8554a43a1e84b4252ef5a1fc637d9
    .doc windows office2003

    ThisWorkbook

    Sheet1

    FGDfrm

    Splash1

    MainMenufrm

    LogInFrm

    Sheet2

    PWRfrm

    Module1

    Module2

    Module3

    UniversalFunction

    Sheet3

    Sheet4

    Quotefrm

    Sheet5

    Sheet6

    Sheet8

    Sheet9

    MaterialSendConfirm

    Sheet7

    Module4

    MQPSfrm

    AddToOrderMD

    Module5

    Sheet18

    Sheet12

    ProductionCalcs

    Sheet13

    SupplierPopUpForm

    MaterialQuoteControls

    RecordAmend

    Module6

    OppAddfrm

    NumKeyValidator

    Module7

    QUOTECHECKER

    SETUPSELDEL

    Module8