General

  • Target

    4358936b174a2f3708cde07a8ca26c215156550a115400e3db7698c37280613a

  • Size

    184KB

  • MD5

    0b522a4da93be45fdccd73e35a9900d5

  • SHA1

    0a762f7e4831d1da61f9e8c4f680da55756a7860

  • SHA256

    4358936b174a2f3708cde07a8ca26c215156550a115400e3db7698c37280613a

  • SHA512

    f9a069924ef5e2e71a761283894c94d36ab5c66a4252d1795a215105de4e2276eef8e8b63c5e06f03d581afc31c882f40dc90d9595e7b1a634346ac30654f9f7

  • SSDEEP

    3072:scxEtjPOtioVjDGUU1qfDlaGGx+cLYIxA+9IfgUrbXUIlEmd7MrU8EcB5O9yCaCg:rxEtjPOtioVjDGUU1qfDlavx+WYIxA8J

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 4358936b174a2f3708cde07a8ca26c215156550a115400e3db7698c37280613a
    .xls windows office2003

    Kangatang

    ThisWorkbook