General

  • Target

    00c449c2a2a27359ea443bfbc1ffee92612b8821b735909d904d0f4b62f0d8a9

  • Size

    184KB

  • MD5

    31dbdfd2d86681ad339a5854b02dd3f3

  • SHA1

    7cbe54222b48888d53625ca99e37546995db2427

  • SHA256

    00c449c2a2a27359ea443bfbc1ffee92612b8821b735909d904d0f4b62f0d8a9

  • SHA512

    dca5fc8640967108d7845a261f500540a173dd1d2fb068093463080faad9d32058c69e90891aabcefbd45460e500938d1b5f34920eb89e9558c0aff322de4466

  • SSDEEP

    3072:tcxEtjPOtioVjDGUU1qfDlaGGx+cLYIxA+9IfgUrbXUIlEmd7MrU8EcB5O9yCaCg:mxEtjPOtioVjDGUU1qfDlavx+WYIxA8J

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 00c449c2a2a27359ea443bfbc1ffee92612b8821b735909d904d0f4b62f0d8a9
    .xls windows office2003

    Kangatang

    ThisWorkbook