General

  • Target

    d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb

  • Size

    313KB

  • MD5

    c34ac57f67e99eec6d0c036e0480f12c

  • SHA1

    821acfea13041dba8c63a603b4e2ee113e66d08f

  • SHA256

    d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb

  • SHA512

    14f601500cdf7949b223528149fbe7b4312abca750cdd3272efeb71fbd4ac4327b2d40685c5005937cf9e6fd103886e1ba03020377cc6768b1396ea335de5642

  • SSDEEP

    6144:qpZU1IeauirhOhnt+P5rJIqxDb/ULIkbLSXlviHyEKkUL:qA1Ieau9+P51zULIkbLSXlviHyEKkUL

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d5ba637adb27ec7e56092399174d775ce663442f993713d0413b08d0fcef1bdb
    .doc windows office2003

    ThisWorkbook

    Sheet1

    Toolbars

    Macros

    frmManager

    CADEngine

    frmCreate

    frmDefaults

    Support

    ReadRange