General

  • Target

    2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f

  • Size

    83KB

  • MD5

    bd512c2aa1a6e746cf6f09a4a3af8a95

  • SHA1

    e275d5ab2a31945ca33c8466d3ae160ed5282de4

  • SHA256

    2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f

  • SHA512

    b64d841f295644e362c0b96007fbcbfc081e05ae186780ca62e92110f7978c3fd6955c4616f02d43c1bb1d4ecfc2957e0648a14b7700f8c5f11aad4fc84898c8

  • SSDEEP

    768:jPLCrF6o0PUOX8FbKBnT2VRDq0PS3zvrWYnBkeOWBCBfq0L/F:dPUo8FbyqVVrS3zTWYnBkeOW2

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f
    .xls windows office2003

    Kangatang

    ThisWorkbook