General

  • Target

    20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc

  • Size

    289KB

  • MD5

    c8db27b21b2f31bdb1be4d75b6fd0ca7

  • SHA1

    08f79a59438dd1123a0a4b0f45f57b300a4f632d

  • SHA256

    20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc

  • SHA512

    b63fab865545cdd39cfa5f1c834c40702be940266edc73b42cb566a3124ba477b5d06deaf982a30e3e86b2e0fce9632649b1d963941dd1ebc013c9bdec822490

  • SSDEEP

    6144:AterYxRQPKNs54nSFksRGPwtHM1gW1GyYj+bXIQyNtLwN+8sBKWDK7tXFoiEPGSg:vTsXYour5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc
    .xls windows office2003

    Kangatang

    ThisWorkbook