General

  • Target

    0b517364c74bb9e5c4583bb913c85662f12db37972b9b587ee6ba48404cc4702

  • Size

    1.8MB

  • MD5

    99d94039656f4b7e02657b1f5eb28fa8

  • SHA1

    0b02dd970ed811edd0349fb2aa807cfe61550451

  • SHA256

    0b517364c74bb9e5c4583bb913c85662f12db37972b9b587ee6ba48404cc4702

  • SHA512

    7b48a8b1dfedfd48ed9387dcc25ee80e756c76749140044b560e18cd224b0dfb293969e5708dadf11633917075e7b91e07e832316e8b4b045170e03b1d3dde9d

  • SSDEEP

    49152:zGlfUIDCazP76/wm00DT5GNx7r/kK2LSYKvsIbM:zEln2DF3Ix7r/kzLEvsC

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0b517364c74bb9e5c4583bb913c85662f12db37972b9b587ee6ba48404cc4702
    .xls windows office2003

    Kangatang

    ThisWorkbook