General

  • Target

    4093e42f727a461d6573faae40fe962e074ce6a03891bdaee91d7ce7f5af44b9

  • Size

    167KB

  • MD5

    8d37c328cbcb7b46ed712827f01e46b5

  • SHA1

    42ca84dcae84c954291d6e850514c906f766dc8a

  • SHA256

    4093e42f727a461d6573faae40fe962e074ce6a03891bdaee91d7ce7f5af44b9

  • SHA512

    0a83d5df5c1008b888c8a2e717809f1b4b40c0add99dfcb9c79cd83bcf62d35599326f4523e17cf32405d7a224e27f232c9509715d6bef7d3abdf3c23272e653

  • SSDEEP

    3072:A6nxEtjPOtioVjDGUU1qfDlaGGx+cLYIxKOkAMQ9SHX1:nxEtjPOtioVjDGUU1qfDlavx+WYIxKOI

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 4093e42f727a461d6573faae40fe962e074ce6a03891bdaee91d7ce7f5af44b9
    .xls windows office2003

    Kangatang

    Kangatang_2

    Kangatang_3

    Kangatang_4

    Kangatang_5

    ThisWorkbook

    Kangatang_6

    Kangatang_7