General

  • Target

    709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5

  • Size

    122KB

  • MD5

    07477013e7eb5d5305a2d247c65e3786

  • SHA1

    2789bafdff47bc56db7fd8efe79efebbfece3924

  • SHA256

    709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5

  • SHA512

    ee90a2310e9ada2eebfd61287f036c016bcbe622fdb1ffbbdf27601e7e75d189b4c5d66394b7db9e6f6f0739f826f6f99b1d5c9622cdbdeca4885d6c306308b5

  • SSDEEP

    3072:+PdY357fZZzkxxEtjPOtioVjDGUU1qfDlaGGx+c46gHAVk6/DYQ96gv64ju4C9Hy:cxEtjPOtioVjDGUU1qfDlavx+d6gHO/P

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 709b9297d8a17a4e893a05ed7d219122cb2fee35c3c6ef4ebad8da1b0c10afa5
    .xls windows office2003

    Kangatang

    Kangatang_2

    Kangatang_3

    Kangatang_4