Behavioral task
behavioral1
Sample
aa055ce176187b4eb6d0c28d4bec4e0e9edf889657f6aad33c67e4b7a01b5035.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa055ce176187b4eb6d0c28d4bec4e0e9edf889657f6aad33c67e4b7a01b5035.xls
Resource
win10v2004-20240802-en
General
-
Target
aa055ce176187b4eb6d0c28d4bec4e0e9edf889657f6aad33c67e4b7a01b5035
-
Size
256KB
-
MD5
a63c3efda0dfffd8a1966154841241c7
-
SHA1
69c562710600104155e1cf6a20e09da4b6ac7c18
-
SHA256
aa055ce176187b4eb6d0c28d4bec4e0e9edf889657f6aad33c67e4b7a01b5035
-
SHA512
84bbe085a471b0fc5ed83b26e6dea93aec057ffb0e08bdf5044b4771df63be5b94ee58306bc17e77ecec74082fc225fc8703bc8523ed839d51f26081c242fef1
-
SSDEEP
6144:Ek3hOdsylKlgryzc4bNhZF+E+ZPUwKYh/nQ7ku1P1L1EtyyUsp5e:anQp1P9b
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
aa055ce176187b4eb6d0c28d4bec4e0e9edf889657f6aad33c67e4b7a01b5035.xls windows office2003
Kangatang
ThisWorkbook
Sheet1