General

  • Target

    52211541d8cb47134dcb67c14a2c851edfeb5191d489916b2f691b4fe15b312a

  • Size

    372KB

  • MD5

    cca002334f80fe18f0ea49263f8519aa

  • SHA1

    ba6b2d4f9be0421c9b75e07c54c4b6fc88887d94

  • SHA256

    52211541d8cb47134dcb67c14a2c851edfeb5191d489916b2f691b4fe15b312a

  • SHA512

    d774f35ff4989c156a461b132ed3e7eddf68b8006fd8f3cc38586de89cb45ff2afbb16b373c9f4f6509659441b0e4e819c93798cf72b00b3720f356ca182b088

  • SSDEEP

    3072:LvuaXv2UlZoXUS8WbCA9U2xmYhp3y4/20qlGaOlko0uGQWslNXGEqR3RLO3fokwJ:A31YGV0k36+qvvApW+XG

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 52211541d8cb47134dcb67c14a2c851edfeb5191d489916b2f691b4fe15b312a
    .doc windows office2003

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet4

    Sheet5

    Sheet3

    ToMauNHapLieu

    DinhKem

    TimVB

    GuiMail

    RibbSuaVB

    Luu1y

    Module1

    XoaTrangDuLieu1

    l_i_i_1_i_1_l_1_1_l_l_1

    Form

    Kichhoat1

    Ribb

    Sheet6

    XoaTrangDuLieu0

    Module2

    Module3