General

  • Target

    1d840d02a5e6ea3deb2c15b17cec92dd1a3026496b0a337c34315fc71cdaf260

  • Size

    372KB

  • MD5

    12abb4ac134d616a3046bf8a0dfcd678

  • SHA1

    f10183d56484ee296ee80f9407154382fa19837c

  • SHA256

    1d840d02a5e6ea3deb2c15b17cec92dd1a3026496b0a337c34315fc71cdaf260

  • SHA512

    0f490d67a3d689d1ecf0e4b6a41677aad7472d73d6d8a218de02f8a43a424477c20c79290621cda0e3ce928e91762eab20a53b2e128ed505ab3e83b1e03024cf

  • SSDEEP

    3072:q4V01fbeWBxx2CtUACXtx83SnlrIcoB44/Yab3AvZETvFRm/4TROVZUlW81B4eGn:q4V0ZbwogLx9TiSESj/5IMUw3CPvQ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1d840d02a5e6ea3deb2c15b17cec92dd1a3026496b0a337c34315fc71cdaf260
    .doc windows office2003

    ThisWorkbook

    Adm

    Лист1

    Лист2

    Лист6

    kaf

    mUniversalUpdate

    GetCommandBar

    Лист5

    Лист4

    Лист3

    basAdminRights

    basFileInfo

    HiddenRows

    mod2016

    modRibbon

    Лист7

    Лист8