General

  • Target

    3b870b44002e2e36d2c126ea1d20874d58cee60bb89ed85da6cb5164977614fe

  • Size

    282KB

  • MD5

    720bc5580e58a526e65f873eb279f0e0

  • SHA1

    132a6ec03a923b1b2ae24d13e054ed713a490a5b

  • SHA256

    3b870b44002e2e36d2c126ea1d20874d58cee60bb89ed85da6cb5164977614fe

  • SHA512

    5a88f1356c788bbd5e1a97934dcc5dbb2b901699a13159dbc9f4518fb4f0a6ec9c99e38d274dcb3275fe843b4d14a21b2d926afe519c135398e746c51ac979af

  • SSDEEP

    3072:Gm1ST7jwQZ3/ozrLpTk8myNpR5orPwnU8cMrrB1xegl00WuBY4DfqI/nzt5/yv8c:gwFB1Igl00WuBF/Ovrkmk

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3b870b44002e2e36d2c126ea1d20874d58cee60bb89ed85da6cb5164977614fe
    .doc windows office2003

    ThisDocument

    modClipboard

    modTempPathAndFile

    Utilities

    PRD_Monotubi