General

  • Target

    565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6

  • Size

    41KB

  • MD5

    c5437d183781beb447c659303cb2cd5b

  • SHA1

    18f139d262873290fcb63922c3f25bbd800a3fa2

  • SHA256

    565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6

  • SHA512

    0e391e096ce475c7ca5d37a626cd1bb39e17c1900d35e4166608c98b43139d2031e477bc1bf48445265f877cf7ef16bfe669b7b25ae42a128bc04fcdf55bfcdb

  • SSDEEP

    384:qW4ZxX2/mA+riXAgWneQPNNRT+CCran88ZYsu0tTl7laC3dmYoUmAZ1jDKa4:qW4W/MriXA9eQPNrTTCrkZYT2172CKP

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6
    .xls windows office2003

    Kangatang

    ThisWorkbook