General

  • Target

    bc2ae6ba7f13faf58fdb2a9b3cd4d60f40363f043ad8a99a6c3ceec4b39ef66e

  • Size

    1.8MB

  • MD5

    61cb2526e7e2ce44806bf91dbba49fd4

  • SHA1

    9086c1878b4bdeb26504e6bfda69eb48204f51f3

  • SHA256

    bc2ae6ba7f13faf58fdb2a9b3cd4d60f40363f043ad8a99a6c3ceec4b39ef66e

  • SHA512

    e35d78db2a4c181c98917efaa77d9aeb3e781edaebd8d79016fd3fd0ffdee93d2ad463946234f8fdc6ed20d312c7a4be4d5f0767ee15a008822cc3d29d5d42ac

  • SSDEEP

    6144:ExEtjPOtioVjDGUU1qfDlavx+WYIBLh1NLNKYFsZ1y9hYjZTFzS9M3ruZ/JIsh/f:ICzYVuthJiyiKxzw9+xUbdg2iWfU4K0

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • bc2ae6ba7f13faf58fdb2a9b3cd4d60f40363f043ad8a99a6c3ceec4b39ef66e
    .xls windows office2003

    Kangatang

    ThisWorkbook