General

  • Target

    de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f

  • Size

    44KB

  • MD5

    6fe235b329ce5867eca0ad7419ad2a85

  • SHA1

    c725294d177e52477a0c608f8271a170ae5f582d

  • SHA256

    de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f

  • SHA512

    fb9dbc496e0be088f6a287bf2cb9c0d6c152c2c7f3976f23d14e0474beb52887b7b8508512b06fa551156f64b275ecee6dbc09ff3dc4ec9092c60d4e0f260521

  • SSDEEP

    768:iKZtdczoKCT0L5Mm/HxsGnkipVyk3hbdlylKsgwyzcTbWhZFGkE+cL/xERUPNz/W:hZtdczoKCT0L5Mm/HxsGnkipok3hbdlj

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • de50bff0856f8328e23d3f091179defbe949e6687eaf77f33266da92000a270f
    .xls windows office2003

    Kangatang

    ThisWorkbook