General

  • Target

    3a90d957d71fa9b47a4469e1768b04b830b0c3d2d58ef2ab3d1d8e1b567eab0f

  • Size

    1.6MB

  • MD5

    6172a9b028c306a50c8733aac9d68618

  • SHA1

    1c9eb4bd3ab38306b80461f42fc780b0b41c955a

  • SHA256

    3a90d957d71fa9b47a4469e1768b04b830b0c3d2d58ef2ab3d1d8e1b567eab0f

  • SHA512

    3be9d63c6bb5227b56537b6ebfea9a01815126ed314af57e87b68493179497e589f92719cf85dc61ec7be0f04238a26afffb4fd12c94fa13c4ac55e2558bfb1d

  • SSDEEP

    24576:uA3eN5muA3eN5mSZVrlw1gZ4n31ixMuwVe2aPU6PQfK5NjF+:uGeVGeoXn3sxMuwVqP6S

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3a90d957d71fa9b47a4469e1768b04b830b0c3d2d58ef2ab3d1d8e1b567eab0f
    .xls windows office2003

    Kangatang