General

  • Target

    c49a5a947a5ff0ddd59aabc977614b20

  • Size

    83KB

  • MD5

    c49a5a947a5ff0ddd59aabc977614b20

  • SHA1

    ba0898c67804b2641d625b85075a0fa1b8747996

  • SHA256

    423bb539e232c0dbf9b7e3dbb38a34295628ae57f408065497e1da938eba3573

  • SHA512

    2fb070d90add32bf94e6721babce887650213672f5644afb96cefe0a0aece4dae9e9b41a6ef83344456867584a74d76f42c880d10b57e6484a29bff9b5470672

  • SSDEEP

    1536:AVdxEtjPOtioVjDGUU1qfDlaGGx+cLgLI0dA+p07ClQ/MvWHcbCriJ65sbCLmRKa:mdxEtjPOtioVjDGUU1qfDlaGGx+cLgLp

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c49a5a947a5ff0ddd59aabc977614b20
    .xls windows office2003

    Kangatang

    ThisWorkbook