Behavioral task
behavioral1
Sample
f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79.xls
Resource
win10v2004-20240709-en
General
-
Target
f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79
-
Size
57KB
-
MD5
1f4efab7df13cf84da57c25dcee439aa
-
SHA1
6b0b933411bc8c8fae4506002a895b10e42fc067
-
SHA256
f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79
-
SHA512
394fc236d83368a2ca7dcd66ef18b5ddb02a9dfa47fd736b45c644e79060cfee67f9933f64b2f98430fd89b55fe18c87c59e9e5dba7ff52e7fe3a8073a31462f
-
SSDEEP
1536:Hk3hOdsylKlgxopeiBNhZFGzE+ch/gGAiA/u2ndHgPB5qaza86:Hk3hOdsylKlgxopeiBNhZFGzE+ch/gGw
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
f3d1c693d7b0ef8e0699a5a88eccc3dc81ce232722bcac61adacfd41d8bf2a79.xls windows office2003
Kangatang
ThisWorkbook