General

  • Target

    4b2f2acefc0ebd5540a206e92d109e8db692c7107616bd88f94fbc1299aa673c

  • Size

    112KB

  • MD5

    063cdda1441fc5bfd576889cceabc9ec

  • SHA1

    6bc08733d86861ff2d44e401db0a6a0bf1c2379e

  • SHA256

    4b2f2acefc0ebd5540a206e92d109e8db692c7107616bd88f94fbc1299aa673c

  • SHA512

    6dc6a19900c045c691bf1f296f7acfe44bb88b3cbecc581b535cd847ca29114b3ba6f88ad087e2633fd791f61732158a3f33f810ccfb3312b10f0fc4589855e9

  • SSDEEP

    3072:9k3hOdsylKlgryzc4bNhZFGzE+cL/gEAsMQa9Dlx4dKwF9B8v/E9dmMEePa:9k3hOdsylKlgryzc4bNhZF+E+W/gEAs+

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 4b2f2acefc0ebd5540a206e92d109e8db692c7107616bd88f94fbc1299aa673c
    .xls windows office2003

    Kangatang