General

  • Target

    419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56

  • Size

    121KB

  • MD5

    20f2847fd1c402e6440f925354c3d278

  • SHA1

    a0435b81f8e02d446883f4522bdf00cc736ae655

  • SHA256

    419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56

  • SHA512

    cad9ea82275a9677868ce28b8fc4faf5eae25a7aac8cc81208b22ecd18ab5c5fcdd7bc9e6e0487365e286a96b7d99c4d4a30a55d845e3d1c6f18cc43be96e725

  • SSDEEP

    3072:ZHeLyEgOtioVjurlxY3fDlaGGx+cZqxTSzAfIuyP5lsA42+Wczh6mq:9eLyEgOtioVjurlxY3fDlavx+UqxTSzg

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56
    .xls windows office2003

    Kangatang

    ThisWorkbook