General

  • Target

    ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324

  • Size

    269KB

  • MD5

    e5430b1c263753db4019ae57db14d4ff

  • SHA1

    d105447de8b399da0da0563fdc026ea57d39b831

  • SHA256

    ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324

  • SHA512

    4ef4ee71b1f36ad5566eb35c8eb06d4de28996aa9537ff3f9546ec236ff9cff546913c8adaa708abfb6acc80511b07c9d6200581e44247d0eb3707f900f159db

  • SSDEEP

    3072:aE4plzqKYwrdjhjK8vMU3EG/TG13ZvdXppi6qMpGpKXW3QayCwo8oMPgpDmgppq:ulzzYw2GLG7lp7GpKFayCwo8oMkDNpq

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • ed1ac60aadd7eb6e2ad57c6b4306ddc719c1554c6f91dc25e80bbf7ac57f9324
    .doc windows office2003

    Sheet20

    ThisWorkbook

    Sheet17

    AboutGWSDAT

    GWSDATAdmin

    LicenseForm

    DisclaimerAcceptForm

    DatatoCSV

    DisclaimerForm1

    ConfigParams

    GWSDAT

    GWSDATOptions

    Sheet1

    Sheet19

    RLibsAdmin