Behavioral task
behavioral1
Sample
5d02fb070f86fc53bae99627164eae83.xls
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d02fb070f86fc53bae99627164eae83.xls
Resource
win10v2004-20220901-en
General
-
Target
5d02fb070f86fc53bae99627164eae83
-
Size
40KB
-
MD5
5d02fb070f86fc53bae99627164eae83
-
SHA1
7b3ea4a1941c230669b999f2c33a64a992f7bada
-
SHA256
471267c67ec23b3d94e5dfbe9cfa46eb1a32ea2797264153d542b19b46f0d5a7
-
SHA512
f1be611e9a9eb1c44e5082d55503ed53ae1070f011455d11edd611d786597473a84ddb199fb37a9cd5d632f38debe064f6d543f06e85af969544551b8ea5977b
-
SSDEEP
384:uypfvqufC/9zibrnG+vDTGFiSV0UO7E3C2t06XZX8888FgNo0DDeSflxmL1Ixzu:/vquqzibrnG+bTeOiCF6XZlwfl++zu
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
5d02fb070f86fc53bae99627164eae83.xls windows office2003
Kangatang
ThisWorkbook