vbaProject[.]bin_pw_infected[.]zip

General

Target
vbaProject.bin_pw_infected.zip
Size 6KB
Sample261027-fb6b1abv4j
SHA256 76ff56616c5ae0ed2c5eb02235f783aba2cbd401c6b67c5d3f01e9c3d139b716
MD5 5c18c0a71c718eca99fe080b23c99cbe
SHA1 45daba310d41ff7617783d2b5eac26e6179b072e
SHA512 691894118671e28d8dac5e063603a419d5ed15f292824bcc65fbe9a55cf34c8c5556eb9cb1a2fffb824604427ccd1140b5e6c99c1ea7cd2e4a8a48a2ee1e6dd9
SSDEEP 96:UQNucsXLFWAnc19M/Bi7w9it2Cs7knIq5ljXMkDzDOyANE6j0PIJhyCQ:UQNucsJWAc19M5V9iFsk56Y6jD0AmCQ
TLSH
T144D1B0A37830C516F40EC775E6403A2D3DC63ACA83D396748115A9C4F4539EF0A3EC06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
static1/unpack001/vbaProject.bin

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
static1/unpack001/vbaProject.bin	office_macro_on_action

SHA256 76ff56616c5ae0ed2c5eb02235f783aba2cbd401c6b67c5d3f01e9c3d139b716
MD5 5c18c0a71c718eca99fe080b23c99cbe
SHA1 45daba310d41ff7617783d2b5eac26e6179b072e
SHA512 691894118671e28d8dac5e063603a419d5ed15f292824bcc65fbe9a55cf34c8c5556eb9cb1a2fffb824604427ccd1140b5e6c99c1ea7cd2e4a8a48a2ee1e6dd9
SSDEEP 96:UQNucsXLFWAnc19M/Bi7w9it2Cs7knIq5ljXMkDzDOyANE6j0PIJhyCQ:UQNucsJWAc19M5V9iFsk56Y6jD0AmCQ
TLSH
T144D1B0A37830C516F40EC775E6403A2D3DC63ACA83D396748115A9C4F4539EF0A3EC06
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected