Behavioral task
behavioral1
Sample
05c55912de8ce0ab45fa9c85a79887db63067b0ec079a50f7b0b45876bc93b1d.xls
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05c55912de8ce0ab45fa9c85a79887db63067b0ec079a50f7b0b45876bc93b1d.xls
Resource
win10v2004-20240508-en
General
-
Target
05c55912de8ce0ab45fa9c85a79887db63067b0ec079a50f7b0b45876bc93b1d
-
Size
56KB
-
MD5
af5aced011bccd382404c5cb0c76b3af
-
SHA1
173b44d8ab9ab5603eb1c98f08dd9569f6881c6d
-
SHA256
05c55912de8ce0ab45fa9c85a79887db63067b0ec079a50f7b0b45876bc93b1d
-
SHA512
4923c3494c139d1de932f702cf7c9a73288c68bdfd95dd406bd0134ab1c6e997a7d53891ef3fa7197664fff1f5e43a42c6f2b0a1380874cb9b7264a920d6479e
-
SSDEEP
768:LnPQ8bf8+3qVdriiVQTy3k+dhPbnYkSlc9Gza86Q:DQ8bf8+3adriiyTy9XPbn+ldza86Q
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
05c55912de8ce0ab45fa9c85a79887db63067b0ec079a50f7b0b45876bc93b1d.xls windows office2003
Kangatang
ThisWorkbook