Behavioral task
behavioral1
Sample
3b9713c0480120f048a0cbbefc0a99dc8b61e188221488be2e1171bddd4451a2.xls
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b9713c0480120f048a0cbbefc0a99dc8b61e188221488be2e1171bddd4451a2.xls
Resource
win10v2004-20240709-en
General
-
Target
3b9713c0480120f048a0cbbefc0a99dc8b61e188221488be2e1171bddd4451a2
-
Size
61KB
-
MD5
7ba210d9e053a62940c7c00a54a0be39
-
SHA1
1e0b73f76fb59a4f31b459f601aed6ad1ff0d85e
-
SHA256
3b9713c0480120f048a0cbbefc0a99dc8b61e188221488be2e1171bddd4451a2
-
SHA512
2eb9cf4adcd6ac17d4893d9bcb2055aede59a7721954dc790e328dfd52cd50adc3d9e209628a24f63d9f53fd306417a3fbb928f012155a02add18777f26c4acf
-
SSDEEP
1536:viok3hbdlylKsgwyzcTbWhZFGkE+cLaxHAyfMuk2rxY/kJVTpc:vrk3hbdlylKsgwyzcTbWhZFGkE+cLaxP
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3b9713c0480120f048a0cbbefc0a99dc8b61e188221488be2e1171bddd4451a2.xls windows office2003
Kangatang
ThisWorkbook