Behavioral task
behavioral1
Sample
a2cf800b3532cce678d656a8d6cea459b1f84061be369ceccb5eb0203a9e3afa.xls
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a2cf800b3532cce678d656a8d6cea459b1f84061be369ceccb5eb0203a9e3afa.xls
Resource
win10v2004-20240426-en
General
-
Target
a2cf800b3532cce678d656a8d6cea459b1f84061be369ceccb5eb0203a9e3afa
-
Size
3.4MB
-
MD5
aac6f517f5aca801683caa4a3af0af9b
-
SHA1
0a1e2a756a493e185e2639b19642b6e345413f46
-
SHA256
a2cf800b3532cce678d656a8d6cea459b1f84061be369ceccb5eb0203a9e3afa
-
SHA512
9849defc0c17d26bf65f5ca52ff5d07844c42f5f5b59ed40e43d85698325f0f427c40c6250521241933fea4161952aa1ef58a185a88102a06e2594cf7f7f5284
-
SSDEEP
12288:a0xgywn5cIMoC7GuY5KcijjnUuv2bE7swZ5qxZte2KFIERunQaKFJpFBjjkbWEJn:a0GywnGIrC8cZJoZs2K2E1a+7/3g2b
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
a2cf800b3532cce678d656a8d6cea459b1f84061be369ceccb5eb0203a9e3afa.xls windows office2003
Kangatang
Kangatang_2
Kangatang_3
Kangatang_4
Kangatang_5
Kangatang_6
Kangatang_7
Kangatang_8
Kangatang_9
Kangatang_10
Kangatang_11
Kangatang_12
Kangatang_13
Kangatang_14
Kangatang_15
Kangatang_16
Kangatang_17
Kangatang_18
Kangatang_19
Kangatang_20
Kangatang_21
Kangatang_22
Kangatang_23
Kangatang_24
Kangatang_25
Kangatang_26
Kangatang_27
Kangatang_28
Kangatang_29
Kangatang_30
Kangatang_31
Kangatang_32
Kangatang_33
Kangatang_34
Kangatang_35
Kangatang_36
Kangatang_37
Kangatang_38
Kangatang_39
Kangatang_40
Kangatang_41
Kangatang_42
Kangatang_43
Kangatang_44
Kangatang_45
Kangatang_46
Kangatang_47
Kangatang_48
Kangatang_49
Kangatang_50
Kangatang_51
Kangatang_52
Kangatang_53
Kangatang_54
Kangatang_55
Kangatang_56
Kangatang_57
Kangatang_58
Kangatang_59
Kangatang_60
Kangatang_61
Kangatang_62
Kangatang_63
Kangatang_64
Kangatang_65
Kangatang_66
Kangatang_67
Kangatang_68
Kangatang_69
Kangatang_70
Kangatang_71
Kangatang_72
Kangatang_73
Kangatang_74
Kangatang_75
Kangatang_76
Kangatang_77
Kangatang_78
Kangatang_79
Kangatang_80
Kangatang_81
Kangatang_82
Kangatang_83
Kangatang_84
Kangatang_85
Kangatang_86
Kangatang_87
Kangatang_88
Kangatang_89
Kangatang_90
Kangatang_91
Kangatang_92
Kangatang_93
Kangatang_94
Kangatang_95
Kangatang_96
Kangatang_97
Kangatang_98
Kangatang_99
Kangatang_100
Kangatang_101
Kangatang_102
Kangatang_103
Kangatang_104
Kangatang_105
Kangatang_106
Kangatang_107
Kangatang_108
Kangatang_109
Kangatang_110
Kangatang_111
Kangatang_112
Kangatang_113
Kangatang_114
Kangatang_115
Kangatang_116
Kangatang_117
Kangatang_118
Kangatang_119
Kangatang_120
Kangatang_121
Kangatang_122
Kangatang_123
Kangatang_124
Kangatang_125
Kangatang_126
Kangatang_127
Kangatang_128
Kangatang_129
Kangatang_130
Kangatang_131
Kangatang_132
Kangatang_133
Kangatang_134
Kangatang_135
Kangatang_136
Kangatang_137
Kangatang_138
Kangatang_139
Kangatang_140
Kangatang_141
Kangatang_142
Kangatang_143
Kangatang_144
Kangatang_145
Kangatang_146
Kangatang_147
Kangatang_148
Kangatang_149
Kangatang_150
Kangatang_151
Kangatang_152
Kangatang_153
Kangatang_154
Kangatang_155
Kangatang_156
Kangatang_157
Kangatang_158
Kangatang_159
Kangatang_160
Kangatang_161
Kangatang_162
Kangatang_163
Kangatang_164
Kangatang_165
Kangatang_166
Kangatang_167
Kangatang_168
Kangatang_169
Kangatang_170
Kangatang_171
Kangatang_172
Kangatang_173
Kangatang_174
Kangatang_175
Kangatang_176
Kangatang_177
Kangatang_178
Kangatang_179
Kangatang_180
Kangatang_181
Kangatang_182
Kangatang_183
Kangatang_184
Kangatang_185
Kangatang_186
Kangatang_187
Kangatang_188
Kangatang_189
Kangatang_190
Kangatang_191
Kangatang_192
Kangatang_193
Kangatang_194
Kangatang_195
Kangatang_196
Kangatang_197
Kangatang_198
Kangatang_199
Kangatang_200
Kangatang_201
Kangatang_202
Kangatang_203
Kangatang_204
Kangatang_205
Kangatang_206
Kangatang_207
Kangatang_208
Kangatang_209
Kangatang_210
Kangatang_211
Kangatang_212
Kangatang_213
Kangatang_214
Kangatang_215
Kangatang_216
Kangatang_217
Kangatang_218
Kangatang_219
Kangatang_220
Kangatang_221
Kangatang_222
Kangatang_223
Kangatang_224
Kangatang_225
Kangatang_226
Kangatang_227
Kangatang_228
Kangatang_229
Kangatang_230
Kangatang_231
Kangatang_232
Kangatang_233
Kangatang_234
Kangatang_235
Kangatang_236
Kangatang_237
Kangatang_238
Kangatang_239
Kangatang_240
Kangatang_241
Kangatang_242
Kangatang_243
Kangatang_244
Kangatang_245
Kangatang_246
Kangatang_247
Kangatang_248
Kangatang_249
Kangatang_250
Kangatang_251
Kangatang_252
Kangatang_253
Kangatang_254
Kangatang_255
Kangatang_256
Kangatang_257
Kangatang_258
Kangatang_259
Kangatang_260
Kangatang_261
Kangatang_262
Kangatang_263
Kangatang_264
Kangatang_265
Kangatang_266
Kangatang_267
Kangatang_268
Kangatang_269
Kangatang_270
Kangatang_271
Kangatang_272
Kangatang_273
Kangatang_274
Kangatang_275
Kangatang_276
Kangatang_277
Kangatang_278
Kangatang_279
Kangatang_280
Kangatang_281
Kangatang_282
Kangatang_283
Kangatang_284
Kangatang_285
ThisWorkbook