General

  • Target

    1e3779a0821745a5b7901dcef1c45f4201ba096d188849dc39a97380d55e62d8

  • Size

    181KB

  • MD5

    82da74db0306b06216657b0d7d68fb9c

  • SHA1

    91f1d4a5726c699fbbd7c329900ea90f40a1f58a

  • SHA256

    1e3779a0821745a5b7901dcef1c45f4201ba096d188849dc39a97380d55e62d8

  • SHA512

    38604b2df7f347150b36b149826d39cd8eb70d35c6af60b3ba50004da6b7b2c73676a5d4d713ff24050b32b9782c7072bdef7c93976f7e5986f8e8240eb31724

  • SSDEEP

    3072:QS4L5pzyvtyxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdABlwqykM8/R/rh6MlMSUf:QSI5BxEtjPOtioVjDGUU1qfDlavx+W+x

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1e3779a0821745a5b7901dcef1c45f4201ba096d188849dc39a97380d55e62d8
    .xls windows office2003

    Kangatang

    ThisWorkbook