General

  • Target

    2de69d26276d85dea827fd0cf19cee575ae602d28739e64d76f0ccdb2cad257c

  • Size

    55KB

  • MD5

    5ea50a11de8bc0f0d453c9b2ca5095ef

  • SHA1

    18fdd83749b649d25d30377f7ae474f3995013e7

  • SHA256

    2de69d26276d85dea827fd0cf19cee575ae602d28739e64d76f0ccdb2cad257c

  • SHA512

    09a333957884a89e8bd59e25a04021986b1a5be084e742cb7c3838b7883e932a055b818cfed6010af72ba9ad6c2e2ad2e2b26e5979a9c832d1485e9c87d3abc2

  • SSDEEP

    1536:e1TCaS8k3hbdlylKsgwyzcTbWhZFGkE+cLaxHuMGpMK61:e1TCa3k3hbdlylKsgwyzcTbWhZFGkE+d

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2de69d26276d85dea827fd0cf19cee575ae602d28739e64d76f0ccdb2cad257c
    .xls windows office2003

    Kangatang