Resubmissions

29-06-2024 20:35

240629-zda4esygmn 8

General

  • Target

    Win32.Powerstats.zip

  • Size

    1.2MB

  • MD5

    ae855e7c228e5649e3935e91f221158f

  • SHA1

    9eaf60a9bc10928b45e2aaac7ff41a492adbbcc9

  • SHA256

    453a3c557daa18735a12c0cbcbad87a2fa53e21ad0927587b93f03e32f298145

  • SHA512

    88e5cc6b3f08c332ae28b8a49302ee6bb9a3074da640f4f96de45c69805d045f341c6a25688bedebc1e0940e4d5937fa9feb680469a52295b4fbd4a031b198a5

  • SSDEEP

    24576:AvvzyNvm8bVAo/ZJBGtEpRUcDRG9BmytATFS+xtLdtaeCU8j51zLvN4m0ODOV3Hu:QGvm8RLZJ8tEpakRG9ZEFhx4eNcBVXOk

Malware Config

Signatures

  • Office macro that triggers on suspicious action 2 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • Win32.Powerstats.zip
    .zip

    Password: infected

  • 7f31ab924bddc2f20697157f7cfa6ff25adfbbb50403052cccd05dc0e9faabc4
    .xls windows office2003

    Sheet1

    ThisWorkbook

    F

  • 905e3f74e5dcca58cf6bb3afaec888a3d6cb7529b6e4974e417b2c8392929148
    .xls windows office2003

    Sheet1

    ThisWorkbook

    F

  • b34893e23666ab3d1d1476a78eb8e921be41273f5a3b653f1d425801278be39b
    .xls windows office2003

    Sheet1

    Module1

    ThisWorkbook

    F

  • ba0a74f2227e32f4cee2e7358979547cf15fd19ea6c72144773f087621bdb4b4
    .xls windows office2003
  • d8823ee70109ce789639748933a45c723060040597d17925cb605ad8f7f85a14
    .xls windows office2003

    Sheet1

    ThisWorkbook

    F