Behavioral task
behavioral1
Sample
419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56.xls
Resource
win10v2004-20240508-en
General
-
Target
419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56
-
Size
121KB
-
MD5
20f2847fd1c402e6440f925354c3d278
-
SHA1
a0435b81f8e02d446883f4522bdf00cc736ae655
-
SHA256
419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56
-
SHA512
cad9ea82275a9677868ce28b8fc4faf5eae25a7aac8cc81208b22ecd18ab5c5fcdd7bc9e6e0487365e286a96b7d99c4d4a30a55d845e3d1c6f18cc43be96e725
-
SSDEEP
3072:ZHeLyEgOtioVjurlxY3fDlaGGx+cZqxTSzAfIuyP5lsA42+Wczh6mq:9eLyEgOtioVjurlxY3fDlavx+UqxTSzg
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
419243f3e6631a9ab451d62b5389ebdcdad237ad1656697368ecc2d5e8b3db56.xls windows office2003
Kangatang
ThisWorkbook