General

  • Target

    8d0461d2197c6f6e14a9f4e3ec2bb9bbe3a5c4c25b4146ead945a3a8825c0fb4

  • Size

    40KB

  • MD5

    c10702e4db9908a7f838381a5d309bf5

  • SHA1

    2bdbdb8b9c206d89c2e17e69edc7f3a4c6dab41c

  • SHA256

    8d0461d2197c6f6e14a9f4e3ec2bb9bbe3a5c4c25b4146ead945a3a8825c0fb4

  • SHA512

    b25cdba7b5057383764ecf4a9efed207b4c1beeb11e2b662efe04d7e137d7a3126bc04071f5146e6d4ba082ff839b12f3728e785d612ab8fd65346e2f9cd24ec

  • SSDEEP

    768:mEUosQzlaZAWh+ZO33ufIUfhttR6wyE/4XglhA1kSdxB7iza86:mNQzlaZAWh+ZO33ufIUfhttR6wyE/4Xj

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8d0461d2197c6f6e14a9f4e3ec2bb9bbe3a5c4c25b4146ead945a3a8825c0fb4
    .xls windows office2003

    Kangatang

    ThisWorkbook