General

  • Target

    3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84

  • Size

    8.9MB

  • MD5

    5d6c692e50b5cf4cd7afa59222b785a6

  • SHA1

    cb499b434c63b9deb4f9fbe1c58b3719376d21f6

  • SHA256

    3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84

  • SHA512

    25d5eee973c448e5a5afb83401d6d1cd46e0b93c42333646585853ffb804934398a74233a183eaccd3c2f1d28328ad1ae965a3bf52ce223a0837afc9c005fce3

  • SSDEEP

    49152:+u3MpJY7iIER2vqf3QSPN40mu1wzZfQgfU8lQvJBYng2MGu+uK9uJvVJmegQSe/h:yYW1LAHHo9fYYYW

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3317b259d9bff62e5f10c1929bfbfdca96b5ea3cae2e3159f98526fe208c4a84
    .doc windows office2003

    frmOptions

    FrmStickyNote

    ChainMachineSelector

    ClientMachine

    DraftNote

    frmFormatPicker

    FrmAbout

    FrmAngleAdjustment

    frmReleaseNotes

    FrmConvertSettings

    FrmMasterElements

    FrmHarveyBall

    FrmHelpMessage

    FrmMigrator

    FrmProperties

    FrmReapplyStyles

    FrmResetSlideTitle

    Language_Switch

    frmMergeTextboxes

    RoadmapCheck

    Agenda_Wizard

    WFileDialog

    TableMachineMenu

    TableReformat

    FormatPropertiesCollection

    FormatProperty

    Footnote

    qpt_colorscheme

    AcnMain

    FrmDeleteEmptyPlaceholders

    AcnRepair

    AcnShapes

    AcnTables

    libTools

    QPT_Constants

    QPT_MenuFile

    QPT_MenuInsert_MasterElements

    QPT_MenuInsert_ValueChain

    AcnTemplates

    QPT_SendSlides

    QPT_MenuTools

    qpt_onStartup

    QPT_FormatCopier

    QPT_ShowUserForms

    QPT_Tools

    ScreenFlick

    FrmEcken

    QPT_CustomUI_Callbacks

    AcnTools

    libShell

    QPT_MenuTools_AgendaWizard

    QPT_RibbonComands

    frmAdmin

    QPT_ColorPicker

    frmCleanUp

    RibbonEventHandler

    MausIcon

    libMCTool

    StampMachine

    frmActionTitle

    frmSubTitle

    libFunctions

    frmAgendaRGB

    Authors

    frmConfidential

    ChartTitleMachine

    frmRoadmap

    Verschiedenes

    FrmDivider

    FrmRemoveDoubleBlanks

    Open_Template

    zzzzz

    FrmAgenda