General

  • Target

    e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506

  • Size

    1.4MB

  • MD5

    721dff13612994fa405b912495018513

  • SHA1

    301712a2192e0390d0de51ca6ab58381cfee9b2e

  • SHA256

    e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506

  • SHA512

    417ac020fffe047c040b2319cbb12b1fe440eca5957a81a736bf9e65fbe62a1a7684e7873482eff3a589b08df8ac3b48782abde9c6e60c5e3389245d784089b7

  • SSDEEP

    24576:4GnMbwTR/AUqao+HF8t66WYmntqRfGE62pY+Vh1aYjazNhH1hqx5PILmRbC1+Y+:7kwTRZFM2qRv

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • e0ff22ba0d68ec29403839969ceecd493efdb6ad9870a2454312d53043231506
    .xls windows office2003

    ThisWorkbook

    PopulateProfilesDropDownModule

    QUERIESErrorsTrap

    frmDateChangeThree

    ConvertCurrencytoWords

    SUMSubTotalingNotCrossTab

    QUERIESSetSQLStringModule

    FINDAmortizationScedule

    QUERIESObtainTablesandColumns

    UNIVERSALMacros

    InsertRowWithinNamedRange

    FunctionsCalledFromWithin

    QUERIESFormatSQLResults

    MISCFindZeroCombinations

    frmHelpSystem

    ALTERComplexDataFillIn

    AAAPublicVariables

    SUMSubTotalInPlace

    QUERIESOpenPivotTableQuery

    SUMCalculateAlwaysOn

    ALTERSortBasedOnColor

    QUERIESRemoteExecution

    Sound

    ALTERSortNineModule

    QUERIESSQLViaADOObject

    QUERIESSQLViaQueryTableObject

    frmExecuteSQLStatement

    CLEANMinorMacros

    SUMSubTotalingCrossTab

    SwapMouse

    frmAmortization

    FunctionsNotUsed

    frmColorSort

    frmMaintainConnectionProfiles

    FormStarters

    Sheet01

    FINDFileListingCode

    frmDateChangeFour

    ALTERDateConverter

    QUERIESSetConnectionModule

    HELPAuthorized

    PasswordBreaker

    FINDAccessConnectionStrings

    OpenProtectedWorkBook

    QUERIESExampleProfiles

    frmDateChangeTwo

    VideoHelp

    frmFlipSigns

    frmConvertASCIICharacters

    FINDBuildSearchList

    SUMMinorMacros

    FUNTIONSFunctionWriter

    frmDateChangeOne

    frmPivotTablesGetData

    frmSortNine

    frmHelpAbout

    TheDataWandBuilder

    CallingTheHelpFile

    FINDAutomatedComparrison

    FINDMarkExactInOutInBue

    frmNoPermission

    frmComplexFillInMessage

    modRecycleVBA

    SUMCount

    ClassConnectionProfile

    frmObtainAuthCodeInuptBox

    LISTSMinorMacros

    FINDMinorMacros

    MISCMinorMacros

    HELPMinorMacros

    QUERIESMinorMacros

    ALTERMinorMacros

    QUERIESBuildTabsAndExecute

    ClassSetCopyRowAndColumn

    HELPCreateModules

    Version14AndAbove

    ALTERTranspose

    frmHelpApplyRoundingFunction