Behavioral task
behavioral1
Sample
e58b41e72bbb24a7254cfe2850e780974ab96f1e3b0890adf1fd0a2d8451f66d.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e58b41e72bbb24a7254cfe2850e780974ab96f1e3b0890adf1fd0a2d8451f66d.xls
Resource
win10v2004-20240709-en
General
-
Target
e58b41e72bbb24a7254cfe2850e780974ab96f1e3b0890adf1fd0a2d8451f66d
-
Size
37KB
-
MD5
fb14298cbd6508421ffad659004c2b11
-
SHA1
286838014a312b0b85d21f1e8f75f81d22315a00
-
SHA256
e58b41e72bbb24a7254cfe2850e780974ab96f1e3b0890adf1fd0a2d8451f66d
-
SHA512
143ae547405daddab9c4e9f0d95b217c6a06f254fcf129e286814ddff7bfffabaf09a6115e233a4ab25a945bd45203587ba0a8fff803375ee28b1a023f562b49
-
SSDEEP
384:E7e6ket2isXA+rixIV39SDgvwqDSESj1Zq4UjZKYzR1W4za86:QkLisfrixIVt1vwqDfCEJC4za86
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
e58b41e72bbb24a7254cfe2850e780974ab96f1e3b0890adf1fd0a2d8451f66d.xls windows office2003
Kangatang
ThisWorkbook