← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Macro document related to Ukrainian energy company in the Kiev region
WHITE AlienVault 2019-06-04 Modified: 2019-06-04
5
IOCs
LOW VOLUME
Macro document related to Ukrainian energy company in the Kiev region
malwareofficemacroukraine
Indicators of Compromise (5)
All FileHash-SHA256 URL hostname YARA
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 6e820b5732cd8bb95546cf39aeb6babe90cf4cc7dde675b718710babcf1740b5 — 2019-06-04
URL http://redmond.corp-microsoft.com/g/help/index.php — 2019-06-04
hostname redmond.corp-microsoft.com — 2019-06-04
YARA 8181daf1db7ec45f1d7ce796ef670b109a53b22d — 2019-06-04
FileHash-SHA256 b475f14a1ffdeaf883c73e97724544b9bba0f6c481830bd25e3ba0d0f69b9181 — 2019-06-04
References (1)
↗ https://twitter.com/jfslowik/status/1135567258472853505