Behavioral task
behavioral1
Sample
6db1e5563eefe8e8fbf7a3139e9e7162f4271a18c7f68bc30601ea999c1565f6.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6db1e5563eefe8e8fbf7a3139e9e7162f4271a18c7f68bc30601ea999c1565f6.xls
Resource
win10v2004-20240508-en
General
-
Target
6db1e5563eefe8e8fbf7a3139e9e7162f4271a18c7f68bc30601ea999c1565f6
-
Size
77KB
-
MD5
0d898cd29b5ce1bf8486ab2da36e2642
-
SHA1
62e877f471f5b8c6a945cdec5f936d677596f493
-
SHA256
6db1e5563eefe8e8fbf7a3139e9e7162f4271a18c7f68bc30601ea999c1565f6
-
SHA512
e541b8834979413bab4d99709fd5c87548cc1515aaac691abaadc07d3646984e1181c8b2becb20b134e2a0b92632f0c8a2293abb3826e68938f453505c10e051
-
SSDEEP
1536:Wqk3hOdsylKlgryzc4bNhZFGzE+cWgLg0dADo:Nk3hOdsylKlgryzc4bNhZFGzE+cWgLgt
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
6db1e5563eefe8e8fbf7a3139e9e7162f4271a18c7f68bc30601ea999c1565f6.xls windows office2003
Kangatang
ThisWorkbook