General

  • Target

    3f1f521f956044e6a12c7a3731ada657727a944afd9ee8c87c257bd87e3b43f2

  • Size

    139KB

  • MD5

    4c8fe3c2cc35aa23120ea17ce02f6d4f

  • SHA1

    828d71aa0344e95a7a0290f5e62180af8477e939

  • SHA256

    3f1f521f956044e6a12c7a3731ada657727a944afd9ee8c87c257bd87e3b43f2

  • SHA512

    bf7e5fe3f04396860141d0ba811faeda3814bb7c4d931922c43526ea542431e1b8054630d957f83217ee3be80f6fcf8aee665c7387994f0fd72d74e0fb3a5253

  • SSDEEP

    3072:D/y+xEtjPOtioVjDGUU1qfDlaGGx+cUY85A+ilk1Pl/7gW1lq2om8ZgHuE5WBl2F:DxEtjPOtioVjDGUU1qfDlavx+DY85A+e

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3f1f521f956044e6a12c7a3731ada657727a944afd9ee8c87c257bd87e3b43f2
    .xls windows office2003

    Kangatang