General

  • Target

    5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7

  • Size

    42KB

  • MD5

    af8d22bdb598e028aa8ff51956740969

  • SHA1

    ab503500db84de5f1c8a9676beeab6ee6faf2efe

  • SHA256

    5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7

  • SHA512

    f28a7bed0ab844efd42bfa3c27c17a09fd5629b8f3774172a295dffa21414d1e824c08be3a4058316a8eb4644e005116612bb89c5551292ed5c4d704f1dc5744

  • SSDEEP

    768:ibUek3hOdsylKlgryzc4bNhZFGzE+cL4LgldWgxMzjuDBg8l0VACT:8k3hOdsylKlgryzc4bNhZFGzE+cL4Lg+

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 5d2e50fd29c9d8dc23817bd5e4ba68f9fb99a10d96cbece549179c912b8016e7
    .xls windows office2003

    Kangatang

    ThisWorkbook