General

  • Target

    97aa555ba483206e78e5ee1b7221018c00e799dfcbd718ea1f396bdcaccfef78

  • Size

    51KB

  • MD5

    287e5a87a0658f72f3508d669595b320

  • SHA1

    6dabcf6616c2e6b5caf893fd111106a733ba802e

  • SHA256

    97aa555ba483206e78e5ee1b7221018c00e799dfcbd718ea1f396bdcaccfef78

  • SHA512

    32e9a8cc5644c85c97a5b6b2532361e76abf6501e384d2fb3ce8a33f6f4a0538d7a443c2bf8039633b4b34c185c1681052d052b898433783a8c75ea9feeffcfa

  • SSDEEP

    1536:i3k3hOdsylKlgryzc4bNhZFGzE+cL4LgldARw8wdVjMrZRTza86:Ck3hOdsylKlgryzc4bNhZFGzE+cL4Lg7

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 97aa555ba483206e78e5ee1b7221018c00e799dfcbd718ea1f396bdcaccfef78
    .xls windows office2003

    Kangatang

    ThisWorkbook