General

  • Target

    cb75ef6ec4dfbf2fded5d9ba194fa2a2259e844f84d0f103155ce3ed730f949f

  • Size

    525KB

  • MD5

    d491ed3e9665a81c3a2638e19fb451b3

  • SHA1

    d5246d9233d5cc752b2d3ba70d978497853ad89c

  • SHA256

    cb75ef6ec4dfbf2fded5d9ba194fa2a2259e844f84d0f103155ce3ed730f949f

  • SHA512

    34ca7e44e489cbc2238e158e1dedc1c511e043d8264d429282a8c4a5837acb0d58467eb338886e6e5454a9354786bf86f1197b9e3ed53b9ac030ebaaed12fac2

  • SSDEEP

    6144:2VXsQHfSocXkRRItSyHFYp0ffaL0IPYsoAUo:2VcH7txF0YfaL0SYsX

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • cb75ef6ec4dfbf2fded5d9ba194fa2a2259e844f84d0f103155ce3ed730f949f
    .doc windows office2003

    ThisDocument

    HZJZ_module

    module_var