Behavioral task
behavioral1
Sample
1e4bbf4c52fa9370d3d6a79e2da9ef5e68a026e7023ee4e26cf53ec11841b45d.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1e4bbf4c52fa9370d3d6a79e2da9ef5e68a026e7023ee4e26cf53ec11841b45d.xls
Resource
win10v2004-20240802-en
General
-
Target
1e4bbf4c52fa9370d3d6a79e2da9ef5e68a026e7023ee4e26cf53ec11841b45d
-
Size
8.1MB
-
MD5
ff68dae5147e5b3cdfd6011bf8d440ca
-
SHA1
5d27be730793e6f9ba7d3f35ec1f5dffc3b87beb
-
SHA256
1e4bbf4c52fa9370d3d6a79e2da9ef5e68a026e7023ee4e26cf53ec11841b45d
-
SHA512
60b2cafd97dcc8430b8007f944e8a8a16f9b5707170b2130e9b9bdf65af158bba5be04f3c3db9c0b4745f27185474d49f694720c06422947c800de3432a508c7
-
SSDEEP
196608:M+y9dIJ2g8eS4dH31Sp6dujTxkevQFwxRwvO1aqePqZRRfr:M+ywj894d1a68TB4KWNqWW
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
1e4bbf4c52fa9370d3d6a79e2da9ef5e68a026e7023ee4e26cf53ec11841b45d.xls windows office2003
Kangatang
ThisWorkbook