Behavioral task
behavioral1
Sample
c8f45e93a01899feec8aa765fe5446ab.xls
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8f45e93a01899feec8aa765fe5446ab.xls
Resource
win10v2004-20220901-en
4 signatures
150 seconds
General
-
Target
c8f45e93a01899feec8aa765fe5446ab
-
Size
1.0MB
-
MD5
c8f45e93a01899feec8aa765fe5446ab
-
SHA1
6060dea5df0f4ef35a257e311888cdd7faf5c641
-
SHA256
57b550b8b0dc62408c8f6e98c0d13ad66534aadec92851aa8b353ec3e6bc5774
-
SHA512
b3ec74a01dc4da4275008525c34e0c7a8d00f7607eb853bfff7c8d7a0d6dfe021be74f68d7ae1859a0fac9c07f7b8beacb2cf8d5f82c554a3f2a29903ad6cb44
-
SSDEEP
24576:tDXSnzL/9wKRydDE5G87qBRFb4gq2yWJ48s6j:t7S13kdQOx/DJ48s6
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c8f45e93a01899feec8aa765fe5446ab.xls windows office2003
Kangatang
ThisWorkbook