General

  • Target

    c033f1ececf7939c2d3dfe81560eebd62ae3307a4272c2299b7d8a9e180fce00

  • Size

    182KB

  • MD5

    81029a120e3e9f45746aa9e0bb963785

  • SHA1

    d39e2aa9907b43ff9d35846f3feafa2d94be27b3

  • SHA256

    c033f1ececf7939c2d3dfe81560eebd62ae3307a4272c2299b7d8a9e180fce00

  • SHA512

    aee9b0458b27888b6bc2cb5b3b8ad153056ecc94bb97817df724b93fd7f618fb0c382722d389ae3d37fe423b0c738678b9f24cbfb093b0e820182aab5a5fa687

  • SSDEEP

    3072:X0cxEtjPOtioVjDGUU1qfDlaGGx+cLYIxAp6Aci56+qXrNmOzHe4FzwljzN0hLfE:VxEtjPOtioVjDGUU1qfDlavx+WYIxAp5

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c033f1ececf7939c2d3dfe81560eebd62ae3307a4272c2299b7d8a9e180fce00
    .xls windows office2003

    Kangatang

    ThisWorkbook