General

  • Target

    2616c18bf8bb39d74c3aa59b574810e2

  • Size

    770KB

  • MD5

    2616c18bf8bb39d74c3aa59b574810e2

  • SHA1

    a26e5107474f630280d74ae90e7f65ac6b0dc7c6

  • SHA256

    6a4325289d827f40a7d6a369080a16befbe468cd3927344db1f8940d9733675e

  • SHA512

    49f08e157ead9cdb90d9a8338c49391f053007d76582451c98150ba4a93b3d4fb081f83f92d7a4a77f12cdbc0be1133b1dc1d152dd3e7f049c2bbbfad77ac52c

  • SSDEEP

    6144:YMDAUGfS7j40srblivj9Lz5y7pl2jviOZhXHddEcsfjmkKxHzPOb6tO5LB2UmMuM:aO7Nq/6ru6t4aixqh8lnVi297h

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2616c18bf8bb39d74c3aa59b574810e2
    .xls windows office2003

    Kangatang

    ThisWorkbook