General

  • Target

    2fd0ebd5391f769e017c3838ce626076031611cb51e3c62e37c0a7b156d4d28f

  • Size

    139KB

  • MD5

    514ea2fffdce6ae3d908d39ac9537596

  • SHA1

    86b51e9237effc900e85bbb8bf0d8621e8e0989a

  • SHA256

    2fd0ebd5391f769e017c3838ce626076031611cb51e3c62e37c0a7b156d4d28f

  • SHA512

    224ce550375700616f3370a4dcf4e7db57fa5ffe090cbd4aecccc51b8af292929ddd51ab7aa67fe2544cb555384c2cb61fb451b65b3c67811a241273470cace3

  • SSDEEP

    3072:B/y+xEtjPOtioVjDGUU1qfDlaGGx+cUY85A+ilk1Pl/7gW1lq2om8ZgHuE5WBl2F:BxEtjPOtioVjDGUU1qfDlavx+DY85A+e

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2fd0ebd5391f769e017c3838ce626076031611cb51e3c62e37c0a7b156d4d28f
    .xls windows office2003

    Kangatang