General

  • Target

    74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx

  • Size

    291KB

  • MD5

    7809e177584176e9def925007146cc5c

  • SHA1

    c9827ff0398a018ff21ebd23e3e0297d95fe1696

  • SHA256

    74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada

  • SHA512

    8396eb7264bc8bbf76f594de2f2ca496ffcb86a830e6033a93a94e27096de7cebe2718fa7bfccd5092ed51f9f1ff0fae0785eaf14d8ce425650bed9a207e6d2e

  • SSDEEP

    3072:v3DkKNI/SPjo6554RvFqBrtwB6e4tXbVfWOen/3cRKEBfCB4CX1vM6KGJSi9KWDV:ljLevFCXbVfWk1AvQaqbodcESCZ8ns

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 74c023ecd78c398e4578b59986cdadd8b72d898e22142516de85d57150d9fada.docx
    .doc .docx windows office2003

    ThisDocument

    cls_singlegroup

    cls_upload

    mdl_globals

    mdl_upload

    frm_save_dialog

    ufrm_main

    mdl_LogoCRM

    frm_login

    mdl_lang

    clsMD5

    clsCrypt

    frm_debug

    mdl_public_functions