General

  • Target

    9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127

  • Size

    2.4MB

  • MD5

    0c8ae23f7013dfca2c88201e63a4df1f

  • SHA1

    c5bc8951334d629fd1de72b3d3e5dc1835d827bb

  • SHA256

    9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127

  • SHA512

    3b77d29d1b579d5a53ee904e0e4ad8aeaa85fac0427925d044c4b30383a4e089fb4a2d21f28699daf4b5f0eee06d129706ab23276564d05bf12ba5a9c0ad7271

  • SSDEEP

    24576:zYkpItUp1DOiI/Qo+MFJoiEaYSm44NCUCkxqXGhKcnj3kCxhA45YIbL7pv/OGE3i:HItU8bFbrNkxq21D

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 9354d9d92f97df612f572348c7349a6b519cfb4db4dd0a8fdc4d2eac76f33127
    .doc windows office2003

    ThisWorkbook

    PopulateProfilesDropDownModule

    QUERIESErrorsTrap

    frmDateChangeThree

    ConvertCurrencytoWords

    SUMSubTotalingNotCrossTab

    QUERIESSetSQLStringModule

    FINDAmortizationScedule

    QUERIESObtainTablesandColumns

    UNIVERSALMacros

    InsertRowWithinNamedRange

    FunctionsCalledFromWithin

    QUERIESFormatSQLResults

    MISCFindZeroCombinations

    frmHelpSystem

    ALTERComplexDataFillIn

    AAAPublicVariables

    SUMSubTotalInPlace

    QUERIESOpenPivotTableQuery

    SUMCalculateAlwaysOn

    ALTERSortBasedOnColor

    QUERIESRemoteExecution

    Sound

    ALTERSortNineModule

    QUERIESSQLViaADOObject

    QUERIESSQLViaQueryTableObject

    frmExecuteSQLStatement

    CLEANMinorMacros

    SUMSubTotalingCrossTab

    SwapMouse

    frmAmortization

    FunctionsNotUsed

    frmColorSort

    frmMaintainConnectionProfiles

    FormStarters

    Sheet01

    FINDFileListingCode

    frmDateChangeFour

    ALTERDateConverter

    QUERIESSetConnectionModule

    HELPAuthorized

    PasswordBreaker

    FINDAccessConnectionStrings

    OpenProtectedWorkBook

    QUERIESExampleProfiles

    frmDateChangeTwo

    VideoHelp

    frmFlipSigns

    frmConvertASCIICharacters

    FINDBuildSearchList

    SUMMinorMacros

    FUNTIONSFunctionWriter

    frmDateChangeOne

    frmPivotTablesGetData

    frmSortNine

    frmHelpAbout

    TheDataWandBuilder

    CallingTheHelpFile

    FINDAutomatedComparrison

    FINDMarkExactInOutInBue

    frmNoPermission

    frmComplexFillInMessage

    modRecycleVBA

    SUMCount

    ClassConnectionProfile

    frmObtainAuthCodeInuptBox

    LISTSMinorMacros

    FINDMinorMacros

    MISCMinorMacros

    HELPMinorMacros

    QUERIESMinorMacros

    ALTERMinorMacros

    QUERIESBuildTabsAndExecute

    ClassSetCopyRowAndColumn

    HELPCreateModules

    Version14AndAbove

    ALTERTranspose

    frmHelpApplyRoundingFunction