General

  • Target

    a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6

  • Size

    269KB

  • MD5

    9c9199d3077c66459fcbf040e687e2b5

  • SHA1

    ff93e5285fdeddc75bb8c79dc4494f06d788cece

  • SHA256

    a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6

  • SHA512

    406e61fbc82cb3a16f6d7649e660a7100c9f01e11bdf3853de49d6a63302667388a2d9de950ccb142a42c599471e1dd2eff39f34953af9a0eff80795731c4241

  • SSDEEP

    6144:upaFUzYwyGpKfaGvGdGLGDyRa8spqTC4D:upaa1ymVCW8uyRtHCk

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a890ac9b5ed2406b0e99bdb4507a2faa4d7a796a0fd5529c8708203c5701b3c6
    .doc windows office2003

    Sheet20

    ThisWorkbook

    Sheet17

    AboutGWSDAT

    GWSDATAdmin

    LicenseForm

    DisclaimerAcceptForm

    DatatoCSV

    DisclaimerForm1

    ConfigParams

    GWSDAT

    GWSDATOptions

    Sheet1

    Sheet19

    RLibsAdmin