General

  • Target

    481505721b8c31436b136ce2f0d5c77629d4dd0c69dd9d84f72374ff7fc6c541

  • Size

    112KB

  • MD5

    caec583d259ba23df7b3aba27f40878e

  • SHA1

    94c5ae3278f1f3e34c2adcf2fba86cbbae6d9c18

  • SHA256

    481505721b8c31436b136ce2f0d5c77629d4dd0c69dd9d84f72374ff7fc6c541

  • SHA512

    3d0275cb646647271a96cfccf604e3b41f15277f0fd04846e739724e4878badd06932ed12aad1e0fee0adb7d9e846dc669761c48f21ce355545ae77fc5e70c0a

  • SSDEEP

    3072:Vk3hOdsylKlgryzc4bNhZFGzE+cL/gEAsMQa9Dlx4dKwF9B8v/E9dmMEePa:Vk3hOdsylKlgryzc4bNhZF+E+W/gEAs+

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 481505721b8c31436b136ce2f0d5c77629d4dd0c69dd9d84f72374ff7fc6c541
    .xls windows office2003

    Kangatang