Behavioral task
behavioral1
Sample
de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f.xls
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f.xls
Resource
win10v2004-20240508-en
General
-
Target
de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f
-
Size
44KB
-
MD5
6fe235b329ce5867eca0ad7419ad2a85
-
SHA1
c725294d177e52477a0c608f8271a170ae5f582d
-
SHA256
de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f
-
SHA512
fb9dbc496e0be088f6a287bf2cb9c0d6c152c2c7f3976f23d14e0474beb52887b7b8508512b06fa551156f64b275ecee6dbc09ff3dc4ec9092c60d4e0f260521
-
SSDEEP
768:iKZtdczoKCT0L5Mm/HxsGnkipVyk3hbdlylKsgwyzcTbWhZFGkE+cL/xERUPNz/W:hZtdczoKCT0L5Mm/HxsGnkipok3hbdlj
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f.xls windows office2003
Kangatang
ThisWorkbook