Behavioral task
behavioral1
Sample
0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a.xls
Resource
win10v2004-20240709-en
General
-
Target
0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a
-
Size
45KB
-
MD5
3acd8bd3968071deb0fd57c5bad29990
-
SHA1
c863e6683f63c9a747a129452e5dae95efc7fb28
-
SHA256
0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a
-
SHA512
182146797077600993673c12c68d87858c439ea08883293fee37ce62479c24834a9a33ac3c45be70e6ef41c9e17a2634a6afe733a5380729a94504e8edcaa63d
-
SSDEEP
768:uviBIpvfM7k6PqiintxU/6v2cT20yAfzh3Np3ZR1aAL1qt3kPUvyCkImAfskeDu2:ciBIpvfM7k6PqiintxU/6+cT20yAfzhD
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a.xls windows office2003
Kangatang
ThisWorkbook