Behavioral task
behavioral1
Sample
c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003.xls
Resource
win10v2004-20240426-en
General
-
Target
c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003
-
Size
108KB
-
MD5
df7f933e4d7058e9a3245b8464159e53
-
SHA1
6a09c4c1910acb77ea8b7b4f13c91d4a32dba4d9
-
SHA256
c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003
-
SHA512
6b2ef06e542a0bbfcf8fabffadb2f5654e8268172d2fbfcc1f91fd85ac61d47331d25683cf23b11b4589157558b40b26ab7798ad24f84e3a9c1e46d9bd5439b4
-
SSDEEP
3072:Ak3hOdsylKlgryzc4bNhZFGzE+cL4LgldAyxgd7Ep06sB:Ak3hOdsylKlgryzc4bNhZF+E+W4Lglde
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003.xls windows office2003
Kangatang
ThisWorkbook