Behavioral task
behavioral1
Sample
f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7.xls
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7.xls
Resource
win10v2004-20240508-en
General
-
Target
f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7
-
Size
104KB
-
MD5
a96cbad001c370f356aa7c2d193ad302
-
SHA1
336e3b77d2cabb6fd01dfc1c89962774e4b6971b
-
SHA256
f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7
-
SHA512
b0ef54a6be6742489ae5a96e6566845539a80e70cf14eed2f3e1b8f6aef0f1ef125016bd593a79702a3f992679f1bdad8e28f468951511dc5b2b02538fc82d43
-
SSDEEP
3072:Lzh8rmjPOtyoVjDGL61EfDlaGGx+cLgLI0ds0U/wESed1OzBzh6:x8rmjPOtyoVjDGL61EfDlavx+WgLI0d6
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
f22d2c2a24c6439275c40f1a9d0f8fe550cd289ed60c5749a27e15641c321cd7.xls windows office2003
Kangatang
ThisWorkbook