| MD5 | cdacb0675707f9864f7d9c4ebc6f0957 |
| SHA1 | 792eabc4bd4f835b5bd400c8206a0e79765c605c |
| Filename | Booking.docm |
| Domains | [tunca.bel.tr] |
| IP Addresses | [94.102.7.201] |
| Antivirus | [HERU.VBA.8okc] |
| [HEUR.VBA.Trojan.e] | |
| [HEUR_VBA.O2] | |
| [Macro.Trojan.Dropperd.Auto] | |
| [Trojan.Ole2.Vbs-heuristic.druvzi] | |
| [VBA/Malma] | |
| [VBS/Jenxcus.A] | |
| [virus.office.obfuscated.1] | |
| [W2KM_LO.F7D92464] | |
| [W2KM_LOCKY.O] |