Behavioral task
behavioral1
Sample
f2fa94aa2354e4abecbe0f744b0fe274.xls
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
f2fa94aa2354e4abecbe0f744b0fe274.xls
Resource
win10v2004-20221111-en
4 signatures
150 seconds
General
-
Target
f2fa94aa2354e4abecbe0f744b0fe274
-
Size
46KB
-
MD5
f2fa94aa2354e4abecbe0f744b0fe274
-
SHA1
e928de5e29061deaafab4a45586baf7fc87aa154
-
SHA256
7ecd3df1cf43e3bc062585511ab41ef989b46ff7b3024b930be02c0836decedb
-
SHA512
6b128fe8a457fc0c0d2d2659eeabdf62bc960ce3df7b6383ec4fbcd2fb7a2634b29734812c49bcd6012191c3434d5969753a82d69bda4d19dca8ca3c7ca18cd3
-
SSDEEP
768:fwvdzAqk3hOdsylKlgxopeiBNhZFGzE+cLgLg0nAWmNt6mVSoGci/:Etk3hOdsylKlgxopeiBNhZFGzE+cLgLN
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
f2fa94aa2354e4abecbe0f744b0fe274.xls windows office2003
Kangatang
ThisWorkbook