General

  • Target

    TT PYMENT COPY.zip

  • Size

    20KB

  • MD5

    6c3e20f16bb359fb22557004478366f9

  • SHA1

    2a429da20afbc5dc6e21b681fd4d89384caa310b

  • SHA256

    67dda85b8fcccfa131d203c066116de63e431fd9d2b2cb4651260f426a0d24de

  • SHA512

    f47d4fa4956e36499dc667b04e11db0805014a93d02fb4515118e534820b6049d3cd93540cba6dae725279443f9af2b92ad86162ac1d05eaca5a668519bc0d85

  • SSDEEP

    384:4+KwQBnfS5PBpXlb5P3L34qjPvx2FILv1A0L8UlkwdPecZO0ZYU8oPa7+l:MJN65PrztR8ILiY8UlPJvZO6YU1Pbl

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • TT PYMENT COPY.zip
    .zip
  • TT PYMENT COPY.doc
    .doc windows office2003

    ThisDocument

    NewMacros

    ThisDocument

    NewMacros