General

  • Target

    f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79

  • Size

    57KB

  • MD5

    1f4efab7df13cf84da57c25dcee439aa

  • SHA1

    6b0b933411bc8c8fae4506002a895b10e42fc067

  • SHA256

    f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79

  • SHA512

    394fc236d83368a2ca7dcd66ef18b5ddb02a9dfa47fd736b45c644e79060cfee67f9933f64b2f98430fd89b55fe18c87c59e9e5dba7ff52e7fe3a8073a31462f

  • SSDEEP

    1536:Hk3hOdsylKlgxopeiBNhZFGzE+ch/gGAiA/u2ndHgPB5qaza86:Hk3hOdsylKlgxopeiBNhZFGzE+ch/gGw

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79
    .xls windows office2003

    Kangatang

    ThisWorkbook