General

  • Target

    zip.zip

  • Size

    24KB

  • MD5

    78862bb30f3f80c9cb66e9110091d815

  • SHA1

    bc7c6434fa3f11ea25960a13fc4988329a0b41de

  • SHA256

    a651217b974852cf4d4c3c582a8045f737b76b1e6b49212adae8d6940b15c297

  • SHA512

    528c31e50e003819c31cf90c6e8625c33253b4f84cef5b21b70c47f6acfb1ca1d8687be9eaa27ec85321f9eefeda2c74839bc0bfce129efba72d50d23ea7501a

  • SSDEEP

    384:M5K4FFYMAqBrD7FcHovAoWAJImGXUGfoD4dFkAHTFTPHSGb+7VyrgxjXAvzoyGAu:SFBpZc/ov+8WHZDyGbWIgpwvzNGAP7a

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • zip.zip
    .zip
  • NoESCape.ppa
    .pps .ppa windows office2003

    bKeyBoard

    bMenu

    bReg

    frmESC