Behavioral task
behavioral1
Sample
1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8.xls
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8.xls
Resource
win10v2004-20240508-en
General
-
Target
1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8
-
Size
43KB
-
MD5
9e4c95546ec42c5f563bfa633bc83040
-
SHA1
ca3afbba6a47850ea688e76084e84d29c0e62046
-
SHA256
1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8
-
SHA512
e6ad4cb02c51bdccdce9f1f046229d8d1696e50f9a3a5547d0becf12b01a91e769771fb4fe480bbdc2333280f40964780f9baec073d6302583c63ed16d5e0067
-
SSDEEP
768:RTYjltqy41rk3hOdsylKlgryzc4bNhZFGzE+cLagHRJN3+O3PLlGR+RVcaMZD:mqyork3hOdsylKlgryzc4bNhZFGzE+cg
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
1f5768516b28366544562670fffb685b47473aed334d150839184801f0bf18c8.xls windows office2003
Kangatang