Behavioral task
behavioral1
Sample
4309c63ff8c7ccfd53b6db2f6551f50c96ac40da6429618a8d1b62de64382c21.xls
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4309c63ff8c7ccfd53b6db2f6551f50c96ac40da6429618a8d1b62de64382c21.xls
Resource
win10v2004-20240709-en
General
-
Target
4309c63ff8c7ccfd53b6db2f6551f50c96ac40da6429618a8d1b62de64382c21
-
Size
62KB
-
MD5
d23a48d7665bf3e12e41ef2e10da4c1e
-
SHA1
3810fcf5caecc1faf003d209b5b0ff261c464816
-
SHA256
4309c63ff8c7ccfd53b6db2f6551f50c96ac40da6429618a8d1b62de64382c21
-
SHA512
e879d18006ba6ccc4c2c9719c6290f321e550cc2581b2d982744de1376785d79f6f80f8dbe77d67161e3094215b7ff3c36ece4f57edb115027a0173762f75f0b
-
SSDEEP
1536:YFk1YW9Lk3hOdsylKlgryzc4bNhZFGzE+cL4LgldATd3mXs3fylh:Ya1YW9Lk3hOdsylKlgryzc4bNhZFGzE/
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
4309c63ff8c7ccfd53b6db2f6551f50c96ac40da6429618a8d1b62de64382c21.xls windows office2003
Kangatang
ThisWorkbook