General

  • Target

    3a9ae7a797b75f36bd8b62f542f1d5da

  • Size

    46KB

  • MD5

    3a9ae7a797b75f36bd8b62f542f1d5da

  • SHA1

    9a04ab5aea1b7cb0150f74255813f5a87e533192

  • SHA256

    11319c7e6b63ea5200adab9b67b8b372beb0dc31f15c32fc7efdbb7dcfc263e4

  • SHA512

    ef642df91681eb667a69ecbf39ca3144ca06a1e2c1fe94f871ea221072b8d2278ee7f9fa606aa7848bedc975611ca8cce0a85fd86187ff30ef75490fa3f8f7c8

  • SSDEEP

    768:FqQ6FVirFBgl57i2X2x1k3hOdsylKlgryzc4bNhZFGzE+ch/gEAlqHAJOrg9yPEu:FqQ6Fck3hOdsylKlgryzc4bNhZFGzE+i

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3a9ae7a797b75f36bd8b62f542f1d5da
    .xls windows office2003

    Kangatang

    ThisWorkbook