Behavioral task
behavioral1
Sample
20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc.xls
Resource
win10v2004-20240426-en
General
-
Target
20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc
-
Size
289KB
-
MD5
c8db27b21b2f31bdb1be4d75b6fd0ca7
-
SHA1
08f79a59438dd1123a0a4b0f45f57b300a4f632d
-
SHA256
20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc
-
SHA512
b63fab865545cdd39cfa5f1c834c40702be940266edc73b42cb566a3124ba477b5d06deaf982a30e3e86b2e0fce9632649b1d963941dd1ebc013c9bdec822490
-
SSDEEP
6144:AterYxRQPKNs54nSFksRGPwtHM1gW1GyYj+bXIQyNtLwN+8sBKWDK7tXFoiEPGSg:vTsXYour5
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
20978e71ecf158517e38cf8e4915c53b1192ce74f65ced5397b781d64f713bcc.xls windows office2003
Kangatang
ThisWorkbook