Behavioral task
behavioral1
Sample
832b388f69816abdaa3518eb978bcaae091ae1e8423e06e0303484826c55915b.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
832b388f69816abdaa3518eb978bcaae091ae1e8423e06e0303484826c55915b.xls
Resource
win10v2004-20240508-en
General
-
Target
832b388f69816abdaa3518eb978bcaae091ae1e8423e06e0303484826c55915b
-
Size
938KB
-
MD5
21f8154220ec692ea8e9c60d66aaad68
-
SHA1
a04dcd1355a6080820117150f0381a8d885c41d3
-
SHA256
832b388f69816abdaa3518eb978bcaae091ae1e8423e06e0303484826c55915b
-
SHA512
1338ab256ee549ffe3ce4167cf949feb99cbf2c435ef93d8f22ca1b2bf231789ed7774d6168880d67733e807022244978a8a2df127c965834320ec425c75b4d6
-
SSDEEP
12288:W4rr3/eSvr0f7akZ7d/jp4F4Z0NmJESVQr1ou3b6g4Ug6boZ6zh3jKW:W4rr3/eSv4f7akZ7JZVE/uTSF
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
832b388f69816abdaa3518eb978bcaae091ae1e8423e06e0303484826c55915b.xls windows office2003
Kangatang
ThisWorkbook