General

  • Target

    c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003

  • Size

    108KB

  • MD5

    df7f933e4d7058e9a3245b8464159e53

  • SHA1

    6a09c4c1910acb77ea8b7b4f13c91d4a32dba4d9

  • SHA256

    c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003

  • SHA512

    6b2ef06e542a0bbfcf8fabffadb2f5654e8268172d2fbfcc1f91fd85ac61d47331d25683cf23b11b4589157558b40b26ab7798ad24f84e3a9c1e46d9bd5439b4

  • SSDEEP

    3072:Ak3hOdsylKlgryzc4bNhZFGzE+cL4LgldAyxgd7Ep06sB:Ak3hOdsylKlgryzc4bNhZF+E+W4Lglde

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c38d17805baf973114121b9cbac3b9cb8ec3c9faa522d646e2c66afa659a4003
    .xls windows office2003

    Kangatang

    ThisWorkbook