Behavioral task
behavioral1
Sample
5c0369cf2a7ba716bd8b24bedaf3a05ced73f32217529fc63c62665f294490cf.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5c0369cf2a7ba716bd8b24bedaf3a05ced73f32217529fc63c62665f294490cf.xls
Resource
win10v2004-20240426-en
General
-
Target
5c0369cf2a7ba716bd8b24bedaf3a05ced73f32217529fc63c62665f294490cf
-
Size
52KB
-
MD5
c212a0fbfc5991b8e0cb580c65be9dc8
-
SHA1
195455e8c0fe9dcfc32edec88cea662bc89c1302
-
SHA256
5c0369cf2a7ba716bd8b24bedaf3a05ced73f32217529fc63c62665f294490cf
-
SHA512
9b1eb482abed4a661826c80d364b13517604e5a2f16fb4f105f34e4983197bc071c28708bb36d4ed57351af76ae49a87b9b7c4e4c17a77c4f9ae16dee39f669e
-
SSDEEP
1536:c1UIxEtjPOtioVjDGUU1qfDlaGGx+cL/IE8VhBBTANa36j:c1ZxEtjPOtioVjDGUU1qfDlaGGx+cL/Z
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
5c0369cf2a7ba716bd8b24bedaf3a05ced73f32217529fc63c62665f294490cf.xls windows office2003
Kangatang
ThisWorkbook