Behavioral task
behavioral1
Sample
c49a5a947a5ff0ddd59aabc977614b20.xls
Resource
win7-20221111-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
c49a5a947a5ff0ddd59aabc977614b20.xls
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
c49a5a947a5ff0ddd59aabc977614b20
-
Size
83KB
-
MD5
c49a5a947a5ff0ddd59aabc977614b20
-
SHA1
ba0898c67804b2641d625b85075a0fa1b8747996
-
SHA256
423bb539e232c0dbf9b7e3dbb38a34295628ae57f408065497e1da938eba3573
-
SHA512
2fb070d90add32bf94e6721babce887650213672f5644afb96cefe0a0aece4dae9e9b41a6ef83344456867584a74d76f42c880d10b57e6484a29bff9b5470672
-
SSDEEP
1536:AVdxEtjPOtioVjDGUU1qfDlaGGx+cLgLI0dA+p07ClQ/MvWHcbCriJ65sbCLmRKa:mdxEtjPOtioVjDGUU1qfDlaGGx+cLgLp
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c49a5a947a5ff0ddd59aabc977614b20.xls windows office2003
Kangatang
ThisWorkbook