General

  • Target

    ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43

  • Size

    487KB

  • MD5

    e4d4159c64fd5b4d0ef2611c3fdc7a6d

  • SHA1

    583a2ceb1c3f45040904c13b308331b287212b1d

  • SHA256

    ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43

  • SHA512

    e92cb9e3de73a3f1937caaec3c30efdac09ac7635e61ecf8677d36d49b240a0bac0dbef8c2a945cc02431aae3a2416dcf3c987ac816b68d195ed1d485017fdff

  • SSDEEP

    12288:X5VTAn6kKEEePbfm3l1lP/SJ++hs4aajBSGy/qo4:pVcn6kKEEePbfY1NSJ++hs4aajBSZ/q7

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • ee5a7dc71e7069c7327b62fbf984fd3f5531af4800378297edb1a47478257c43
    .doc .vbs windows office2003 polyglot

    ЭтаКнига

    frmTibur

    modChFormat

    Лист6

    clsChartEv

    frmArch

    frmSelTypes

    frmPW

    Лист4

    frmMacroStart

    frmLab

    frmChFmtView

    Лист5

    frmRepSets

    modStress3