General

  • Target

    328d5021590bf808545e470fbfb153f96d61f48f518e6c8a7c98d8d03d796dfc

  • Size

    7KB

  • MD5

    f60df6fc3e7ba808ecd1d69ea5c91610

  • SHA1

    afd0fa03182b33878a6ce6579a4a39be0e3aaae7

  • SHA256

    328d5021590bf808545e470fbfb153f96d61f48f518e6c8a7c98d8d03d796dfc

  • SHA512

    e969ef7f942237acd6ac10ee596809489454622e50ba80e728b62b6b9319337b21d8a41693bb707f7b9a48d7a4901bd3b7c21d2bac926c560e08817e8c9ea542

  • SSDEEP

    192:X/MytHX4IDOBlokyLHdzQA6KPRzE7C69WjLmELIbT55JGEN+RCp:X/vHX4IaoLdzQDMECDjLL8bTT5vp

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://107.172.13.160/---.----.-------------------....-.-.-.-.-.-.-.-.......------------/.-.-.-.-.-.-.-.-.-..-.------------..........wiz.wiz

Signatures

Files

  • 328d5021590bf808545e470fbfb153f96d61f48f518e6c8a7c98d8d03d796dfc
    .zip

    Password: infected

  • aa92a3fc1435e17c3200534f0dc9bc7225a05587_1633535444644.bin
    .docx office2007