General

  • Target

    b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82

  • Size

    74KB

  • MD5

    867689a2287adcf8a7bd667dbfad81fe

  • SHA1

    5d0119eda2db4e7fc7385f00c785f8b9f199e0ca

  • SHA256

    b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82

  • SHA512

    5ffffe4df35a0f22ff2c159eb8c795bd7cd5b904084cbda9ecfbe70bce1c2811e2d892935ca824ffc249497ef2f081e55475797be989f7c3da2017fa723aa431

  • SSDEEP

    1536:bx5rfZ9PyLoY6WP5l9RYHjUoiqiPlB0txc1Ymb8ESQjWD6UGg9Sma1Wp0:bx5rfZ9PyLoY6WP5l9RYHjXtiPlBoW1Y

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • b4e0e7ae80ff2db0aed08903690872a9fb3d12d71cad7a53c29ba62f62be3e82
    .doc .vbs windows office2003 polyglot

    ThisDocument

    Module1

    NewMacros