General

  • Target

    f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7

  • Size

    104KB

  • MD5

    a96cbad001c370f356aa7c2d193ad302

  • SHA1

    336e3b77d2cabb6fd01dfc1c89962774e4b6971b

  • SHA256

    f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7

  • SHA512

    b0ef54a6be6742489ae5a96e6566845539a80e70cf14eed2f3e1b8f6aef0f1ef125016bd593a79702a3f992679f1bdad8e28f468951511dc5b2b02538fc82d43

  • SSDEEP

    3072:Lzh8rmjPOtyoVjDGL61EfDlaGGx+cLgLI0ds0U/wESed1OzBzh6:x8rmjPOtyoVjDGL61EfDlavx+WgLI0d6

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7
    .xls windows office2003

    Kangatang

    ThisWorkbook