General

  • Target

    aa49f0ea8afb7432edd65fb16734db210c259c85839d4db0af3e3c0c69601958

  • Size

    66KB

  • MD5

    e1b39cf074a95af156b9a05227179c59

  • SHA1

    ef27b739c07bfe5c6e2226b6c87e2a0b318fc564

  • SHA256

    aa49f0ea8afb7432edd65fb16734db210c259c85839d4db0af3e3c0c69601958

  • SHA512

    d1302543c70478f98f983edcb044cd905ede2e5fd6e18c1d75fcef87621034d2cec13aef99092586625cdce5ad6133a9425685878b2764ee8b217a4d6555fe67

  • SSDEEP

    1536:n8k3hOdsylKlgryzc4bNhZFGzE+cL/gldAB68i4:n8k3hOdsylKlgryzc4bNhZFGzE+cL/gZ

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • aa49f0ea8afb7432edd65fb16734db210c259c85839d4db0af3e3c0c69601958
    .xls windows office2003

    Kangatang