General

  • Target

    0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f

  • Size

    1.4MB

  • MD5

    952b502bc86f6df62e5a451743efc93e

  • SHA1

    fd81476a5966031a058d67dd0176a2e1f9becb70

  • SHA256

    0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f

  • SHA512

    5c13140e0e4d53511e5d1999c6002f6d5aadfbe3d0d403543f3e06e156ae813d3bf724048d38a9edb7f6f1309bd44fb2541c3a86c98a99a032446d61cc3dd896

  • SSDEEP

    24576:4inMbwTR/AUqao+HF8t66WYmntqRfGE62pY+Vh1aYjazNhH1hYx5PILmRbC1+Y+:nkwTRZFM2qR5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0d9e7422aa30937d49ee6a1db88405ddcff9448e92588b91d9b8ba76d46cf26f
    .xls windows office2003

    ThisWorkbook

    PopulateProfilesDropDownModule

    QUERIESErrorsTrap

    frmDateChangeThree

    ConvertCurrencytoWords

    SUMSubTotalingNotCrossTab

    QUERIESSetSQLStringModule

    FINDAmortizationScedule

    QUERIESObtainTablesandColumns

    UNIVERSALMacros

    InsertRowWithinNamedRange

    FunctionsCalledFromWithin

    QUERIESFormatSQLResults

    MISCFindZeroCombinations

    frmHelpSystem

    ALTERComplexDataFillIn

    AAAPublicVariables

    SUMSubTotalInPlace

    QUERIESOpenPivotTableQuery

    SUMCalculateAlwaysOn

    ALTERSortBasedOnColor

    QUERIESRemoteExecution

    Sound

    ALTERSortNineModule

    QUERIESSQLViaADOObject

    QUERIESSQLViaQueryTableObject

    frmExecuteSQLStatement

    CLEANMinorMacros

    SUMSubTotalingCrossTab

    SwapMouse

    frmAmortization

    FunctionsNotUsed

    frmColorSort

    frmMaintainConnectionProfiles

    FormStarters

    Sheet01

    FINDFileListingCode

    frmDateChangeFour

    ALTERDateConverter

    QUERIESSetConnectionModule

    HELPAuthorized

    PasswordBreaker

    FINDAccessConnectionStrings

    OpenProtectedWorkBook

    QUERIESExampleProfiles

    frmDateChangeTwo

    VideoHelp

    frmFlipSigns

    frmConvertASCIICharacters

    FINDBuildSearchList

    SUMMinorMacros

    FUNTIONSFunctionWriter

    frmDateChangeOne

    frmPivotTablesGetData

    frmSortNine

    frmHelpAbout

    TheDataWandBuilder

    CallingTheHelpFile

    FINDAutomatedComparrison

    FINDMarkExactInOutInBue

    frmNoPermission

    frmComplexFillInMessage

    modRecycleVBA

    SUMCount

    ClassConnectionProfile

    frmObtainAuthCodeInuptBox

    LISTSMinorMacros

    FINDMinorMacros

    MISCMinorMacros

    HELPMinorMacros

    QUERIESMinorMacros

    ALTERMinorMacros

    QUERIESBuildTabsAndExecute

    ClassSetCopyRowAndColumn

    HELPCreateModules

    Version14AndAbove

    ALTERTranspose

    frmHelpApplyRoundingFunction