Behavioral task
behavioral1
Sample
50f02ccae62b6f220cb7135eef8888fa3aba38f40daf3d631bb50f3d4eb820d9.xls
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
50f02ccae62b6f220cb7135eef8888fa3aba38f40daf3d631bb50f3d4eb820d9.xls
Resource
win10v2004-20240426-en
General
-
Target
50f02ccae62b6f220cb7135eef8888fa3aba38f40daf3d631bb50f3d4eb820d9
-
Size
42KB
-
MD5
666c37711299eaaf20e7e16a740e7d9d
-
SHA1
04fa8d9468c88db583ce2aa1abd24b0fd0aafda3
-
SHA256
50f02ccae62b6f220cb7135eef8888fa3aba38f40daf3d631bb50f3d4eb820d9
-
SHA512
88748afa061ba67edc76e365cb12a93955c8f556c863b38f866b4afecc88c5495889e9f55613c9630739b5aa0afb7023f4a4a82ad126b48ac4b7b0491e2489b4
-
SSDEEP
768:QIhVwvdR6Ik3hbdlylKsgqopeJBWhZFGkE+cL2NEAY9tXuRP2VJ39jDtXoya8NGq:9hy6Ik3hbdlylKsgqopeJBWhZFGkE+c7
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
50f02ccae62b6f220cb7135eef8888fa3aba38f40daf3d631bb50f3d4eb820d9.xls windows office2003
Kangatang
ThisWorkbook