General

  • Target
    articles.zip
  • Size 709KB
  • Sample260930-phkhjsxapf
  • SHA256 4f67e0b3cfcf0297cd4cbc6449abf39962d2c40981bfd8f23a832b634e075a4a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

File Explorer

  • articles.zip
    .zip 709KB
  • Mzfmj.hta
    .html .vbs 458B
  • Mzfmj0.hta
    .html .vbs 458B
  • The_Progress_and_Promise_of_the_Moon-Kim_Summit.docm
    .docm 47KB
  • asist.gif
    2KB
  • asist_vbs_exe_down.gif
    2KB
  • asist_vbs_getfiles.gif
    .vbs 1KB
  • asist_vbs_redirect_vbs.gif
    .vbs 630B
  • cow.gif
    77KB
  • cow.php
    3KB
  • cow_pass.gif
    482KB
  • dll.gif
    54KB
  • doc.php
    3KB
  • drop.gif
    5KB
  • exe.gif
    37KB
  • expres.php
    .vbs 4KB
  • help.php
    .ps1 612B
  • help.txt
    252B
  • index.php
    811B
  • macro.vbs
    144B
  • power_com.gif
    1KB
  • power_com_wow.gif
    1KB
  • power_dir.gif
    2KB
  • power_exe.gif
    442B
  • power_exe_del.gif
    186B
  • power_key.gif
    2KB
  • power_key_j.gif
    6KB
  • power_kill.gif
    374B
  • s.php
    142B
  • s0.php
    .js 16KB
  • upload.php
    424B

articles.zip

  • SHA256 4f67e0b3cfcf0297cd4cbc6449abf39962d2c40981bfd8f23a832b634e075a4a
  • MD5 SHA1 SHA512 SSDEEP TLSH