Behavioral task
behavioral1
Sample
2395fa1369a85aab2e3d6339f37d34b8e1268c3eb9fe5acf20553c7c623f28c7.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2395fa1369a85aab2e3d6339f37d34b8e1268c3eb9fe5acf20553c7c623f28c7.xls
Resource
win10v2004-20240508-en
General
-
Target
2395fa1369a85aab2e3d6339f37d34b8e1268c3eb9fe5acf20553c7c623f28c7
-
Size
43KB
-
MD5
777bd56c7e4dfb07c425d98aca1cd614
-
SHA1
22e2bd114953addac2d26333de101bdd8a671f45
-
SHA256
2395fa1369a85aab2e3d6339f37d34b8e1268c3eb9fe5acf20553c7c623f28c7
-
SHA512
757990d71ac4fa307dbdb4ea4b1d17dfee6740dda3ef9c2207838f76a74837204efb74ff78cdc7c26285e9f939dd5294290c1894d3f2502ef726c3d9f838cf2a
-
SSDEEP
768:HfT/c8rmjPOtyoVjDGL61EfDlaGGx+c4tUgMYAeHl1A3TAf:r08rmjPOtyoVjDGL61EfDlaGGx+c4tUK
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource yara_rule sample office_macro_on_action -
Processes:
resource sample
Files
-
2395fa1369a85aab2e3d6339f37d34b8e1268c3eb9fe5acf20553c7c623f28c7.xls windows office2003
Kangatang
ThisWorkbook