Behavioral task
behavioral1
Sample
159bbf20977f80289e54d468f1c240cfec079a6df6e279e024b3ff406a0acd58.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
159bbf20977f80289e54d468f1c240cfec079a6df6e279e024b3ff406a0acd58.xls
Resource
win10v2004-20240802-en
General
-
Target
159bbf20977f80289e54d468f1c240cfec079a6df6e279e024b3ff406a0acd58
-
Size
6.7MB
-
MD5
b1f779ce36012c743c370ad44be3b709
-
SHA1
bb428956aaa17e96e47902e1a243cf8ab8d151ab
-
SHA256
159bbf20977f80289e54d468f1c240cfec079a6df6e279e024b3ff406a0acd58
-
SHA512
ed05f9167a288ade3a829ce77c034e0b31d6abe83e886fdebb4e3e592127ba547a4d2bd6e03c4f04cfacb94c962c31f61f1950e41801cc3d6c00cede29ae5134
-
SSDEEP
196608:Fw6RUj6CQQzFpsj/j1/WkxLRDUp9IsfPHz7D3qfk:Fw6R1CPps9Og1DUp9IsfCk
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
159bbf20977f80289e54d468f1c240cfec079a6df6e279e024b3ff406a0acd58.xls windows office2003
Kangatang
ThisWorkbook