General

  • Target

    dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663

  • Size

    148KB

  • MD5

    84c85a3bda18d0b0e49d58bd434b0bea

  • SHA1

    1fab754823d386422ef597577c920a4bc0f02fbf

  • SHA256

    dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663

  • SHA512

    64efc3b72d0ecaf51596c7baa8da43784186170adee0c2b995080b0bd2529cdce01a8615039465769214ff806c936c38bf525577e477d487b3ac8af8e8695f8f

  • SSDEEP

    3072:GTxSKCtVEH+b+hq7VuJuH7ru/YD+C7jZvRyJ7Zb9SdC4v:GTcKCtVEBuV4uqYD+8yJZhSF

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • dda99e5803a1579ad74baa50526d466b50f5e28b101b12aacaf70085c9c12663
    .doc windows office2003

    ЭтаКнига

    Лист3

    SAP_ZRD_279

    Formatting

    Start

    TXTinExcel

    initialize

    Лист4

    Saves

    Лист31

    Лист1

    Doubles

    Automate