General

  • Target

    20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e

  • Size

    301KB

  • MD5

    18829dcb73311530d7a19d3f9f2aa22f

  • SHA1

    ee4f0099a31c3268e25ac39ff0aa3de34feffc86

  • SHA256

    20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e

  • SHA512

    5160a95eb0c1d484b1a1198286481d51c1da5fadcc738ee0d592c77fa6cb18055456c959db6b2811dd8a06aeb71c92a4171964fbc5e92902bafb30a42a9ff918

  • SSDEEP

    6144:DlqBjW9pkmsct+P5rj43kZx2ESNE3K9vsQT:QWHkmJ+P5H43kZx2ESNE3K9vsQT

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 20b778f28e8217a6d1be1f8d00a872b5928d27a59f702d9ee0ac53baa1754b9e
    .doc windows office2003

    ThisWorkbook

    Sheet1

    frmCreate

    Support

    frmManager

    Macros

    CADEngine

    frmDefaults

    ReadRange