Behavioral task
behavioral1
Sample
0ce1d196b8f520a5c82504cc43a173befb0aab818136d4ea3e2371e399aeb48c.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0ce1d196b8f520a5c82504cc43a173befb0aab818136d4ea3e2371e399aeb48c.xls
Resource
win10v2004-20240709-en
General
-
Target
0ce1d196b8f520a5c82504cc43a173befb0aab818136d4ea3e2371e399aeb48c
-
Size
38KB
-
MD5
0ff73b5e63f84e20e46e5aa343b2a527
-
SHA1
b3e041862f85de4386dad93c4907471b72fdeac0
-
SHA256
0ce1d196b8f520a5c82504cc43a173befb0aab818136d4ea3e2371e399aeb48c
-
SHA512
f59e7934238073e52fa388cdc38a0b1116ae721206e2e0a965d70491049ac3fb9c105d50856717617a66b363eeece4f68754ee56e57aaa5eadc26ce5adb3e17f
-
SSDEEP
384:CdfDwC/9ziSCajGLiS9yFEghU13rw4Uek3KYzU1EQza86:iDDziSfjepAX9Qza86
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0ce1d196b8f520a5c82504cc43a173befb0aab818136d4ea3e2371e399aeb48c.xls windows office2003
Kangatang
ThisWorkbook