General

  • Target

    a731827686cf4dd48a6a1556c6104736468425e297a152755b6fdd9a5a1066d3

  • Size

    58KB

  • MD5

    deadd4c02ca9862a88fce1f9ae40c88f

  • SHA1

    ab49bb4736f832b2f57b67a4a60801af3eb6c321

  • SHA256

    a731827686cf4dd48a6a1556c6104736468425e297a152755b6fdd9a5a1066d3

  • SHA512

    cb343c33114ec9bf2385c543927caf0ce982634f4797cca13e63bb40199aa3381a785750b138b63378f220dc0dba1c7996d82a7a68921c42c27311d73ab8b431

  • SSDEEP

    1536:eCCCeqeeqo4vOiegtgZhQrcV2MnMp5S0G95+cLgLk0n2WqNf8mza86:Z4vOiegtgZhQrcV2MnMp5S0G95+cLgLn

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a731827686cf4dd48a6a1556c6104736468425e297a152755b6fdd9a5a1066d3
    .xls windows office2003

    Kangatang

    ThisWorkbook