Behavioral task
behavioral1
Sample
e05776fd17a2f75594a183c0a228294a22be3fdacd785f5f3bbbb0e2e1aa9c2e.xls
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e05776fd17a2f75594a183c0a228294a22be3fdacd785f5f3bbbb0e2e1aa9c2e.xls
Resource
win10v2004-20240426-en
General
-
Target
e05776fd17a2f75594a183c0a228294a22be3fdacd785f5f3bbbb0e2e1aa9c2e
-
Size
177KB
-
MD5
db7128ce401a34cd3c88bb5167be56e7
-
SHA1
4f0d1b5f78b288fd06c8c344286b64f6ded3791d
-
SHA256
e05776fd17a2f75594a183c0a228294a22be3fdacd785f5f3bbbb0e2e1aa9c2e
-
SHA512
bdd5a22fc21aa90a7430336846639c4dbfc93e02ecc6549a337ef3640520f4b508e24eb4a16b75cc2168ca3066f5adb02fa7c6f60196b31a4ffbc280535c403e
-
SSDEEP
3072:TL8Z14l9xEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAYsW6M8LG/LhUUe29bf5WRjQ:TLm14XxEtjPOtioVjDGUU1qfDlavx+WZ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
e05776fd17a2f75594a183c0a228294a22be3fdacd785f5f3bbbb0e2e1aa9c2e.xls windows office2003
Kangatang
ThisWorkbook