Behavioral task
behavioral1
Sample
df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41.pps
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41.pps
Resource
win10v2004-20240508-en
General
-
Target
df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41
-
Size
21.2MB
-
MD5
d8fb7d8df78a7b4cf2b88848a573d637
-
SHA1
e4a0524d78be7de0a7e5f6e360f80da0a89b4001
-
SHA256
df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41
-
SHA512
b165ee32a1938e42c714f4bbe8081908352404b7255872a7dfab1569e176d566ca69a132de3d806703af58f2bbb40d64a6223791749445ca5230dd90b7ffe854
-
SSDEEP
393216:znbnqy1AV68qEkKZTgHyqXyRtItvNApgaXSEo7q3ZF4lNIVzWy45/HxpIG89sqvc:XlO6fiZ0HvW2Qg/ROViLRpIG89sCjjqr
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41.pps windows office2003
Kangatang
ThisWorkbook