Behavioral task
behavioral1
Sample
b8e54dace4b96c99b5405057a7d2f91d.xls
Resource
win7-20221111-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
b8e54dace4b96c99b5405057a7d2f91d.xls
Resource
win10v2004-20220812-en
5 signatures
150 seconds
General
-
Target
b8e54dace4b96c99b5405057a7d2f91d
-
Size
145KB
-
MD5
b8e54dace4b96c99b5405057a7d2f91d
-
SHA1
e3b4aa2413e2c7f53325eaba9b918065c7482a2e
-
SHA256
ac3fc34c3371391cf01a3f8ea9e28d04da18b2b4d2e4a419bde9c8f9e920b936
-
SHA512
bfc75afea1063ec208157afea8f5a1f7a2e50692ca65347cebefa0ea95fc801b31cafa5b1d235625f97113b81546c5db8fd5ffebe134bcc8ebd2e834f9633a69
-
SSDEEP
1536:j0mf31n5ejezeneyeVe9enekdxDkebc5ejezeneyeVe9enekdxDkebcQyyQyPCO1:39pyQrRw3Pqh+duRKvWbl5TBa
Score
8/10
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b8e54dace4b96c99b5405057a7d2f91d.xls windows office2003
Kangatang
ThisWorkbook