Behavioral task
behavioral1
Sample
22801168754ea315b63534fc8f073b794e4f89648211d3f61cb57822a3af6510.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
22801168754ea315b63534fc8f073b794e4f89648211d3f61cb57822a3af6510.xls
Resource
win10v2004-20240709-en
General
-
Target
22801168754ea315b63534fc8f073b794e4f89648211d3f61cb57822a3af6510
-
Size
231KB
-
MD5
bd8a3ca27bd298b2fd18b6a221b947dd
-
SHA1
f8c299bce61986b10553f90712cdf731b0a80e51
-
SHA256
22801168754ea315b63534fc8f073b794e4f89648211d3f61cb57822a3af6510
-
SHA512
046eba9f8757009d6e1eef184e0351cd764d95da53d4a42b0f436256db90eee4521f1ce71d0cad8175acf75e0d19d5b30dfb9ed049123a3d32773dfffad9180c
-
SSDEEP
6144:VZrZnBAKo+I6qY+g6QJP1nBfZNFUxEtjPOtioVjDGUU1qfDlavx+W+LIfdAcwACy:iH
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
22801168754ea315b63534fc8f073b794e4f89648211d3f61cb57822a3af6510.xls windows office2003
Kangatang
ThisWorkbook