General

  • Target

    9614bc2e8a5c2df5b01f72ca4a1a9c31f96f3dfadc566239d3ac4ea9c2abe23a

  • Size

    56KB

  • MD5

    e57d66434cf7334eb2fa9af7551f9401

  • SHA1

    a5fa536b711b28eca48ea611e9123eaeb92460dc

  • SHA256

    9614bc2e8a5c2df5b01f72ca4a1a9c31f96f3dfadc566239d3ac4ea9c2abe23a

  • SHA512

    5c82817926ae9fd089a30c821db113221375037638c02372a49daf2ba0f2955ce119232b0f42c437c9b29b2b878a6ae399734a7455dbc4a174dab02d4f30f8d3

  • SSDEEP

    1536:47Z+RwPONXoRjDhIcp0fDlaGGx+cL26nAXqVvrJ1Yka:47Z+RwPONXoRjDhIcp0fDlaGGx+cL26n

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 9614bc2e8a5c2df5b01f72ca4a1a9c31f96f3dfadc566239d3ac4ea9c2abe23a
    .xls windows office2003

    Kangatang

    ThisWorkbook