General

  • Target

    80ea7bc1054b32b4228b21719a0e6756d0548fd4de00b89b95b52e96103ced8f

  • Size

    45KB

  • MD5

    c6281c56c4bfc7271d90ebf5c9f91222

  • SHA1

    b2f08bd699d5bcafff595fae80db4a40c64326bb

  • SHA256

    80ea7bc1054b32b4228b21719a0e6756d0548fd4de00b89b95b52e96103ced8f

  • SHA512

    45fb29e3f8156362bed685ce9ee0433e8481cc88fd03e9b53b9c037e0cb16b5983eb3e6c0a0e7e9e00956e5fcc2c193d36a420822aa47dea4c4185287bf9403f

  • SSDEEP

    768:PHhjQJk3hbdlylKsgqopeJBWhZFGkE+cL4Lxlnmnez9X5KQTudHSwCU4za86sI:Pkk3hbdlylKsgqopeJBWhZFGkE+cL4Lk

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 80ea7bc1054b32b4228b21719a0e6756d0548fd4de00b89b95b52e96103ced8f
    .xls windows office2003

    Kangatang

    ThisWorkbook