General

  • Target

    1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8

  • Size

    43KB

  • MD5

    9e4c95546ec42c5f563bfa633bc83040

  • SHA1

    ca3afbba6a47850ea688e76084e84d29c0e62046

  • SHA256

    1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8

  • SHA512

    e6ad4cb02c51bdccdce9f1f046229d8d1696e50f9a3a5547d0becf12b01a91e769771fb4fe480bbdc2333280f40964780f9baec073d6302583c63ed16d5e0067

  • SSDEEP

    768:RTYjltqy41rk3hOdsylKlgryzc4bNhZFGzE+cLagHRJN3+O3PLlGR+RVcaMZD:mqyork3hOdsylKlgryzc4bNhZFGzE+cg

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8
    .xls windows office2003

    Kangatang