Behavioral task
behavioral1
Sample
b49098bbfd39aafac96ae008f11d96c029d7087c920f1053f132252e006f6c50.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b49098bbfd39aafac96ae008f11d96c029d7087c920f1053f132252e006f6c50.xls
Resource
win10v2004-20240709-en
General
-
Target
b49098bbfd39aafac96ae008f11d96c029d7087c920f1053f132252e006f6c50
-
Size
234KB
-
MD5
aa47e410e1babdf352403b4e6772d18b
-
SHA1
925bfb8f49073fc82855bb7611d8b720a1da8a2f
-
SHA256
b49098bbfd39aafac96ae008f11d96c029d7087c920f1053f132252e006f6c50
-
SHA512
ef287cccdf2904177bb8c50768c63f47185f872c0ea30435a1c254a4bd202356e945d2c4420cae498ec1889da1c7e0dd7050f171b3cb6e83dfd1431ea1a15e1a
-
SSDEEP
6144:DnFPRnKYqUaAMOwm8m/5DJfxZfHIxEtjPOtioVjDGUU1qfDlavx+W/IE3uqqF2:9
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b49098bbfd39aafac96ae008f11d96c029d7087c920f1053f132252e006f6c50.xls windows office2003
Kangatang
ThisWorkbook
Sheet1
Sheet2
Sheet3
Sheet4
Sheet5
Sheet6
Sheet7
Sheet8
Sheet9
Sheet10
Sheet11
Sheet12
Sheet13