Behavioral task
behavioral1
Sample
0771ece60f4fec5151192d5cb1afa34d9f772526db76f9092cf7c8eb1bc03460.xls
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0771ece60f4fec5151192d5cb1afa34d9f772526db76f9092cf7c8eb1bc03460.xls
Resource
win10v2004-20240508-en
General
-
Target
0771ece60f4fec5151192d5cb1afa34d9f772526db76f9092cf7c8eb1bc03460
-
Size
57KB
-
MD5
009205a3abf78d804576074174232326
-
SHA1
6c2ec128fadec6677a09da3d09831b03a67fbee1
-
SHA256
0771ece60f4fec5151192d5cb1afa34d9f772526db76f9092cf7c8eb1bc03460
-
SHA512
f8fef713e0fa0c1d2a21cea92fb144c2e1ed118fe41019a7749767f2295966abd32a35f9a42e1fbde290ebd1b7f7877dd44ea52dfdd377fbfe6797e038dacd04
-
SSDEEP
1536:u0LqcOcyDBfPhTxNHdLVvScSIqE7Cawk3hbdlylKsgwyzcTbWhZFGkE+cLaxHabC:u0LqcOcyDBHhTxNHdLVvScSIqE7CawkV
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0771ece60f4fec5151192d5cb1afa34d9f772526db76f9092cf7c8eb1bc03460.xls windows office2003
Kangatang
ThisWorkbook