Behavioral task
behavioral1
Sample
565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6.xls
Resource
win10v2004-20240709-en
General
-
Target
565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6
-
Size
41KB
-
MD5
c5437d183781beb447c659303cb2cd5b
-
SHA1
18f139d262873290fcb63922c3f25bbd800a3fa2
-
SHA256
565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6
-
SHA512
0e391e096ce475c7ca5d37a626cd1bb39e17c1900d35e4166608c98b43139d2031e477bc1bf48445265f877cf7ef16bfe669b7b25ae42a128bc04fcdf55bfcdb
-
SSDEEP
384:qW4ZxX2/mA+riXAgWneQPNNRT+CCran88ZYsu0tTl7laC3dmYoUmAZ1jDKa4:qW4W/MriXA9eQPNrTTCrkZYT2172CKP
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
565ef2d24d256d34452208ed2d6b7230c3c4c3c5df560f74f8bd172c62ad44c6.xls windows office2003
Kangatang
ThisWorkbook