General

  • Target

    1901ab505adb294e16d0f69f72fb4d24544eb04c12f1c89edd4b4bef01c95207

  • Size

    11.9MB

  • MD5

    3c4691aa487d87f28736f9509aaff226

  • SHA1

    378b8ad61d93ac4f3cbe4c14a272111b1c8f6a8d

  • SHA256

    1901ab505adb294e16d0f69f72fb4d24544eb04c12f1c89edd4b4bef01c95207

  • SHA512

    ccc0241d4404daa0242284e328e2681c36b661a09270d6027826b13184d0d007a3ca379bb70680e6212818700bb665e28a75e1ba29d96ad443d200cf38901609

  • SSDEEP

    196608:RJrol06m3wBWuW9H9IlmVp1fL1evCEGWUz+yknQ1VoCD2U9etvThWB4k8/p79H:ReqloWuWDkqEJUzDjLetgps

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1901ab505adb294e16d0f69f72fb4d24544eb04c12f1c89edd4b4bef01c95207
    .xls windows office2003

    Kangatang

    Kangatang_2