General

  • Target

    SortTCVN.xla.xlsx

  • Size

    117KB

  • MD5

    49eaa835cc167cf3c4b542ced889dc3c

  • SHA1

    9770fc12a9d57b39e6e07683595bdb1f4df0d800

  • SHA256

    ff0c6360d706651366f925109ef1fe9694c5ec19a31a3239cd8ae2dfa76ec987

  • SHA512

    8943fc788acd7cddfeb4c86dc053ee9a1416aac4e44fe3e89c08f1deef431fe7ba0d51d9abd92b1f75e115332d75ecc73dfbea84f0d8ee39dd1a1a66194ba49d

  • SSDEEP

    3072:c5u5AakoEUHks0sl4RLivCrDbsjNw2cM0NtJQpgRLaR6:b7HjfNwu0RQoLN

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • SortTCVN.xla.xlsx
    .xls .xlsx windows office2003

    Mybookdata

    Sheet1

    change

    ChdoiMa

    MyUse

    Sortvn

    Toolexc