Overview

overview

8

Static

static

8

fbdcce7c63...39.xls

windows7-x64

1

fbdcce7c63...39.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbdcce7c63af42dc2c9915fd707b5caa6e38d74d715e8d18778b1ce0d4319d39

  • Size

    122KB

  • MD5

    ba7a756d22347fa5a6a322123f274dc6

  • SHA1

    1ae5df6bee89409741efc4a8ba8fb5c41ea20916

  • SHA256

    fbdcce7c63af42dc2c9915fd707b5caa6e38d74d715e8d18778b1ce0d4319d39

  • SHA512

    c85832f0d660680062d5bd09a0a8db3a38839c694ea00e91d3c2e9ee8643b75e7dc532a98919226f771fdee2ef7c6e2557a9ce1c96a269b9c419157cf15dc336

  • SSDEEP

    3072:qPdY357fZZzkxxEtjPOtioVjDGUU1qfDlaGGx+c46gHAVk6/DYQ96gv64ju4C9Hy:QxEtjPOtioVjDGUU1qfDlavx+d6gHO/P

Score
8/10
macromacro_on_action

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • fbdcce7c63af42dc2c9915fd707b5caa6e38d74d715e8d18778b1ce0d4319d39
    .xls windows office2003

    Kangatang

    Kangatang_2

    Kangatang_3

    Kangatang_4