| MD5 | 5f62f02cb8435dad8307e4b31f00287e |
| SHA1 | 1d15a5dac576d89496c0277c601aa69806f56f95 |
| Filename | billing_inv_307786236.doc |
| Domains | [api.ipify.org] [bethetboha.com] [lyranhinin.ru] [inforaningligh.ru] [lacasanews.com] |
| IP Addresses | [23.21.225.71] [77.246.149.178] [23.23.131.41] [54.197.246.207] [96.254.56.228] [54.225.210.40] |
| Antivirus | [Troj.Dropper.Msword!c] |
| [Troj/DocDl-FJL] | |
| [Trojan:W97M/Nastjencro.A] | |
| [TrojanDownloader:O97M/Donoff!map] | |
| [VBA:Trojan.VBA.Downloader.BN] | |
| [W2KM_DLOADER.AUSFK] | |
| [W2KM_HANCITOR.YYSXA] | |
| [W97M.Downloader] | |
| [W97M.Dropper.GK] |