General

  • Target

    fec28121fd1ae37697d4b31e8bd18e12aef1e56ae45ac76bbf3053214ce7fe65

  • Size

    111KB

  • MD5

    e17ae5893c6418fc94612a354afe42f5

  • SHA1

    1fbb64e1c709347a89f9b07e3f8836edadd60411

  • SHA256

    fec28121fd1ae37697d4b31e8bd18e12aef1e56ae45ac76bbf3053214ce7fe65

  • SHA512

    63603f89e80a535cd7443e59fa2272bf2b1b8d6df25ee2c5e4b0c6552fb28684010fee5eba00ad525d4e9a041dd40f95b58b5c77e09b3ee213b76ffdb2bf42b0

  • SSDEEP

    3072:pXk3hbdlylKsgwyzcTbWhZFGkE+cLgLx0dncEdYmK189n/ctJTLXN66:hk3hbdlylKsgwyzcTbWhZFVE+WgLx0dY

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • fec28121fd1ae37697d4b31e8bd18e12aef1e56ae45ac76bbf3053214ce7fe65
    .xls windows office2003

    Kangatang

    ThisWorkbook