General

  • Target

    dff89281acf5532811f16a537aecb3393e7fe559299fbcef4ef7664681902f17

  • Size

    63KB

  • MD5

    fd9856335d3b35185fb52b9941103263

  • SHA1

    b77291516ad4bcf1df2e785cdb0ca32957fc33b5

  • SHA256

    dff89281acf5532811f16a537aecb3393e7fe559299fbcef4ef7664681902f17

  • SHA512

    f01c1a30f29717c3ff4775f80dcb2c68dfe89e7ad001ac005e84407e5b6632c3322f75a7e41e82905442621bb06cb598baf2d96b14aaf235101d236a0137d18c

  • SSDEEP

    1536:gYWchk3hOdsylKlgryzc4bNhZFGzE+cvdw6Ar+FuOVUFAWlYWza861:00k3hOdsylKlgryzc4bNhZFGzE+cvdws

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • dff89281acf5532811f16a537aecb3393e7fe559299fbcef4ef7664681902f17
    .xls windows office2003

    Kangatang

    ThisWorkbook