Behavioral task
behavioral1
Sample
3e3f27a3743a64f36070199138d9b508a9991149e727e3df24050b4bcde30ddb.xls
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3e3f27a3743a64f36070199138d9b508a9991149e727e3df24050b4bcde30ddb.xls
Resource
win10v2004-20240426-en
General
-
Target
3e3f27a3743a64f36070199138d9b508a9991149e727e3df24050b4bcde30ddb
-
Size
184KB
-
MD5
ac2b869026d0b79eb55f098fad0b9a80
-
SHA1
c85efbe5f6b435fa36edeb139817952b86933678
-
SHA256
3e3f27a3743a64f36070199138d9b508a9991149e727e3df24050b4bcde30ddb
-
SHA512
b9a8a916875af6cb6d650c22e71d552cd9dcbec7c64e395afb851f9b5c63f04b68a5a796dcee25853c96b6a2b55665c5117f1af04d992ad617895df651ea625e
-
SSDEEP
3072:RS4LYl4f0NUxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAJzkAS0M8/l/whIe0g0Lg:RSIYl4dxEtjPOtioVjDGUU1qfDlavx+a
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3e3f27a3743a64f36070199138d9b508a9991149e727e3df24050b4bcde30ddb.xls windows office2003
Kangatang
ThisWorkbook