General

  • Target

    a5d0a278e86d3d39420c0c02bf41c99be1476d266cc0d759e991812a8b05ed34

  • Size

    46KB

  • MD5

    11c708edc2634bb3ef3652bfd6e318a1

  • SHA1

    94e1491fcfbe258b8bbbbeb42c1f93610dea4764

  • SHA256

    a5d0a278e86d3d39420c0c02bf41c99be1476d266cc0d759e991812a8b05ed34

  • SHA512

    f61b98b4777eb21cdc21ca3e3a3a275af5bb1ae1a09e2b3f0e70981fe769c782f5bfc7ff6f2557aaa9b234df1bd7cf3718320d37b5feb51f02e5c374a1dbf7f4

  • SSDEEP

    768:KR9Ymk3hbdlylKsgwyzcTbWhZFGkE+cL/xEmdeu4Klh1LxHimdZz:4Nk3hbdlylKsgwyzcTbWhZFGkE+cL/xs

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a5d0a278e86d3d39420c0c02bf41c99be1476d266cc0d759e991812a8b05ed34
    .xls windows office2003

    Kangatang