General

  • Target

    8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba

  • Size

    269KB

  • MD5

    05f913f63647836dc284fc6bb6611712

  • SHA1

    9ed3fc3e7d177f6bae8c237b4e332cf356deffb3

  • SHA256

    8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba

  • SHA512

    1cb7da3619f43a201df9ad182a3a08da98c9c4fa3228e05a2f74f410d056d0eb0aaca2e0c8a446ec92779c9b4fd1ae703a795916be44925d7533f6efa3c5d676

  • SSDEEP

    3072:YE4plzqKYwrdjhjK8vMU3EG/TG13ZvdXppi6iMpGpKXW3Qapc7o8hxPgpMmgppO:klzzYw2GLG7lpTGpKFapc7o8hxkMNpO

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8aebfe2b60a794489879610f33351dedbabaec5ca5ef5983c2b57a4f20b388ba
    .doc windows office2003

    Sheet20

    ThisWorkbook

    Sheet17

    AboutGWSDAT

    GWSDATAdmin

    LicenseForm

    DisclaimerAcceptForm

    DatatoCSV

    DisclaimerForm1

    ConfigParams

    GWSDAT

    GWSDATOptions

    Sheet1

    Sheet19

    RLibsAdmin