General

  • Target

    0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc

  • Size

    140KB

  • MD5

    346d9c0218d7d8a51fe575b73612fec8

  • SHA1

    3a123a403d4668160d63136432ebe7f99d190562

  • SHA256

    0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc

  • SHA512

    78b379876f2ba85411db75c40198c5c19b88fda6b0d3fc4018b4bb566d9cd01b0d28f4549dcd6a932f287c1465226b23476a61397b2a81f63772aa621eae9393

  • SSDEEP

    3072:ovxxEtjPOtioVjDGUU1qfDlaGGx+chqxISzhhPJFKFzUe9:ixEtjPOtioVjDGUU1qfDlavx+YqxISzh

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0689a3ee6f6f3bc28aee617c6bc62ba817d82ddfe9eadf0fa12789e8b0725acc
    .xls windows office2003

    Kangatang

    ThisWorkbook