Behavioral task
behavioral1
Sample
0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc.xls
Resource
win10v2004-20240426-en
General
-
Target
0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc
-
Size
140KB
-
MD5
346d9c0218d7d8a51fe575b73612fec8
-
SHA1
3a123a403d4668160d63136432ebe7f99d190562
-
SHA256
0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc
-
SHA512
78b379876f2ba85411db75c40198c5c19b88fda6b0d3fc4018b4bb566d9cd01b0d28f4549dcd6a932f287c1465226b23476a61397b2a81f63772aa621eae9393
-
SSDEEP
3072:ovxxEtjPOtioVjDGUU1qfDlaGGx+chqxISzhhPJFKFzUe9:ixEtjPOtioVjDGUU1qfDlavx+YqxISzh
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc.xls windows office2003
Kangatang
ThisWorkbook