Behavioral task
behavioral1
Sample
c588bba12b56e9330c407f3c9281eb12508b3bd71df7f231fa2272a43fb2e3c1.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c588bba12b56e9330c407f3c9281eb12508b3bd71df7f231fa2272a43fb2e3c1.xls
Resource
win10v2004-20240508-en
General
-
Target
c588bba12b56e9330c407f3c9281eb12508b3bd71df7f231fa2272a43fb2e3c1
-
Size
60KB
-
MD5
b23e092de9451b0fcee6eef095b4787a
-
SHA1
187bf2168c5cbbeb5fb334a349e67fc748ea4e61
-
SHA256
c588bba12b56e9330c407f3c9281eb12508b3bd71df7f231fa2272a43fb2e3c1
-
SHA512
34a52e89c773929215ac97fd5d75350a665e1312cbc7c68859fe7e61822c54a164d5257f9638fdb62093dddf63827652be6dc855dfdb00f3d39a245bf8967ac5
-
SSDEEP
1536:48k3hbdlylKsgqopeJBWhZFGkE+cL4Lxln1TFy8HDBo/amGza86p:48k3hbdlylKsgqopeJBWhZFGkE+cL4LW
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c588bba12b56e9330c407f3c9281eb12508b3bd71df7f231fa2272a43fb2e3c1.xls windows office2003
Kangatang
ThisWorkbook