General

  • Target

    0f9a5e32595862b6404b6d618d1e4dc2e69efa625b72c1a9d03058b1908de063

  • Size

    44KB

  • MD5

    034d79399613fab579e10f992478c30f

  • SHA1

    ddb1b6dbbf48a364582ba6375e16e429f05604d7

  • SHA256

    0f9a5e32595862b6404b6d618d1e4dc2e69efa625b72c1a9d03058b1908de063

  • SHA512

    ff34c362550c8642f74b7fadc200b25290de9af3a9afa4658f45185860643dc91a10a66aaba30569c8de70633071aec0751d55763dbcde3c57feb74cc9529311

  • SSDEEP

    768:OJkOZfOiMyQSLNDPpz9tz5ztbGcCUuMVqyYwxEtjPOtioVjDGUU1qfDlaGGx+cLX:KfOiMyQSLNDPpz9tz5ztbGcCUuMVqy/c

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0f9a5e32595862b6404b6d618d1e4dc2e69efa625b72c1a9d03058b1908de063
    .xls windows office2003

    Kangatang

    ThisWorkbook