General

  • Target

    82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6

  • Size

    1015KB

  • MD5

    4e2bb8dc4cf7e0a500d42037edf7971b

  • SHA1

    1e20196496f0bfefb2f56acae2f0ad2a968d0575

  • SHA256

    82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6

  • SHA512

    761a39aced841b90f65cc9bc8ab80a47fd19fcebc74efc75766ca77006d4d3436692e1e36fe8c90ee839dc2166cdb08081070450d2417610c5b5c5a905d2a445

  • SSDEEP

    24576:j4iSLaCMlHhYGBJUxbRKnX9Yy1Dhxp0oQ9K9jhwXGAxOgUk/T:kiSLaCkHhYGBJUxlK+y1Dp

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 82694647003053446a4f6a023bcfc99eadf52024ba6bad0a73046e85c63c4fd6
    .doc .vbs windows office2003 polyglot

    ThisDocument

    ClassREG

    VDocDesFront

    VDocDesLibrary

    FrmInsVoc

    FrmWordArt

    FrmTableMan

    FrmProtect

    ClassEvent

    FrmInsTab

    frmTemplates

    server

    ModSession

    FrmCon

    ModLang

    Class64

    ClassHttp

    FrmSave

    Class64ToFile

    FrmUnProtect