Behavioral task
behavioral1
Sample
709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5.xls
Resource
win10v2004-20240611-en
General
-
Target
709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5
-
Size
122KB
-
MD5
07477013e7eb5d5305a2d247c65e3786
-
SHA1
2789bafdff47bc56db7fd8efe79efebbfece3924
-
SHA256
709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5
-
SHA512
ee90a2310e9ada2eebfd61287f036c016bcbe622fdb1ffbbdf27601e7e75d189b4c5d66394b7db9e6f6f0739f826f6f99b1d5c9622cdbdeca4885d6c306308b5
-
SSDEEP
3072:+PdY357fZZzkxxEtjPOtioVjDGUU1qfDlaGGx+c46gHAVk6/DYQ96gv64ju4C9Hy:cxEtjPOtioVjDGUU1qfDlavx+d6gHO/P
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5.xls windows office2003
Kangatang
Kangatang_2
Kangatang_3
Kangatang_4