General

  • Target

    df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41

  • Size

    21.2MB

  • MD5

    d8fb7d8df78a7b4cf2b88848a573d637

  • SHA1

    e4a0524d78be7de0a7e5f6e360f80da0a89b4001

  • SHA256

    df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41

  • SHA512

    b165ee32a1938e42c714f4bbe8081908352404b7255872a7dfab1569e176d566ca69a132de3d806703af58f2bbb40d64a6223791749445ca5230dd90b7ffe854

  • SSDEEP

    393216:znbnqy1AV68qEkKZTgHyqXyRtItvNApgaXSEo7q3ZF4lNIVzWy45/HxpIG89sqvc:XlO6fiZ0HvW2Qg/ROViLRpIG89sCjjqr

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • df6a4ecc3e2ae4b2ace21169ada1b136864ee96f80cb1e9dec15eaf35ec5ab41
    .pps windows office2003

    Kangatang

    ThisWorkbook