General

  • Target

    7d1fbe79df80ed442093510023b383c42749c4a689c1590f2d288402392e58e0.docx

  • Size

    1.9MB

  • MD5

    5d36d4da71eb9a3b04917c4e197e6c5a

  • SHA1

    88fa956d021807c5fc9d0e71d5410ea7e0a4ca91

  • SHA256

    7d1fbe79df80ed442093510023b383c42749c4a689c1590f2d288402392e58e0

  • SHA512

    67f88ec5bdae7e14df7c5022bcf0f45d9caf24bd09428661ed2289738b1045b81657d78d9ac97a19f070b87b545140fe7916770c453af36c25d79650045bbc38

  • SSDEEP

    49152:3oTUKfLSFKFbOjoCQWSKGA26oA+Cm8hsSPOA0dmzWZ4k89kGGt192U8HBtOERUtO:hHxEa

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 7d1fbe79df80ed442093510023b383c42749c4a689c1590f2d288402392e58e0.docx
    .doc .docx windows office2003

    ThisDocument

    loader

    postopen

    util

    writer

    writer64