Behavioral task
behavioral1
Sample
2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f.xls
Resource
win10v2004-20240226-en
General
-
Target
2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f
-
Size
83KB
-
MD5
bd512c2aa1a6e746cf6f09a4a3af8a95
-
SHA1
e275d5ab2a31945ca33c8466d3ae160ed5282de4
-
SHA256
2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f
-
SHA512
b64d841f295644e362c0b96007fbcbfc081e05ae186780ca62e92110f7978c3fd6955c4616f02d43c1bb1d4ecfc2957e0648a14b7700f8c5f11aad4fc84898c8
-
SSDEEP
768:jPLCrF6o0PUOX8FbKBnT2VRDq0PS3zvrWYnBkeOWBCBfq0L/F:dPUo8FbyqVVrS3zTWYnBkeOW2
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
2887db7054f76adbc67963caf9f866544d7a7c8de2c9907d2310158890106c9f.xls windows office2003
Kangatang
ThisWorkbook