General

  • Target

    e281e978e374d02c78299a3b44b8bc4c40e5916e3bbf266bcc3e676ed4fc1968

  • Size

    191KB

  • MD5

    3b7810ce5a781f453c7c1e8a72488a35

  • SHA1

    de06f63c24da43b09409f530b80dc191223c219a

  • SHA256

    e281e978e374d02c78299a3b44b8bc4c40e5916e3bbf266bcc3e676ed4fc1968

  • SHA512

    877a4f62780738712fece76ccd2c7918004de726cdc28b2038d7b48daeb80fb16b1fd42812ca0829b2fa93c5ce24cee4759a265a736d709d2c00c009d5a07cac

  • SSDEEP

    3072:7LmfOfMEsidln3XgEe3WRszYZGGsO2PkMnPuMPPp8jMnPPTBa:COfN3Xr12zVpR88

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • e281e978e374d02c78299a3b44b8bc4c40e5916e3bbf266bcc3e676ed4fc1968
    .xls windows office2003

    Kangatang

    ThisWorkbook