Behavioral task
behavioral1
Sample
321d0d013d2b40d10d98be570ee83d0b56a046cc418936a2cd1b91ade4b91e65.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
321d0d013d2b40d10d98be570ee83d0b56a046cc418936a2cd1b91ade4b91e65.xls
Resource
win10v2004-20240611-en
General
-
Target
321d0d013d2b40d10d98be570ee83d0b56a046cc418936a2cd1b91ade4b91e65
-
Size
46KB
-
MD5
83b13ee0e89436005a190c99d2531e17
-
SHA1
978d52d608ab7451fadfee31549329631c3859db
-
SHA256
321d0d013d2b40d10d98be570ee83d0b56a046cc418936a2cd1b91ade4b91e65
-
SHA512
712977069383cb0ea63938ecc84fa88107ee2959c4662246aaa936403d632f4668a056fc1d75ec0412f9e4811084390a60b635ab0c327070a924944cbb00dd94
-
SSDEEP
768:SAyGhKtSFsv66g3KnFil/vQY54kkGfn+cW33YAMuN4jQEioD+IcEe1dIN0RVMaFj:9WSFsv66g3KnFil/vQY54kkGfn+cW33P
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
321d0d013d2b40d10d98be570ee83d0b56a046cc418936a2cd1b91ade4b91e65.xls windows office2003
Kangatang
ThisWorkbook