General

  • Target

    0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a

  • Size

    45KB

  • MD5

    3acd8bd3968071deb0fd57c5bad29990

  • SHA1

    c863e6683f63c9a747a129452e5dae95efc7fb28

  • SHA256

    0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a

  • SHA512

    182146797077600993673c12c68d87858c439ea08883293fee37ce62479c24834a9a33ac3c45be70e6ef41c9e17a2634a6afe733a5380729a94504e8edcaa63d

  • SSDEEP

    768:uviBIpvfM7k6PqiintxU/6v2cT20yAfzh3Np3ZR1aAL1qt3kPUvyCkImAfskeDu2:ciBIpvfM7k6PqiintxU/6+cT20yAfzhD

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0492af5b314d778ae4883b32e4842e707e58b12b43a5019022eb9b54bbd4cd7a
    .xls windows office2003

    Kangatang

    ThisWorkbook