Behavioral task
behavioral1
Sample
17f67c1d6e4ab7cf7aaba1162fd69c0e8b381c394704f2d1f1f2bce14170523c.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
17f67c1d6e4ab7cf7aaba1162fd69c0e8b381c394704f2d1f1f2bce14170523c.xls
Resource
win10v2004-20240802-en
General
-
Target
17f67c1d6e4ab7cf7aaba1162fd69c0e8b381c394704f2d1f1f2bce14170523c
-
Size
254KB
-
MD5
06013cea048867b1cd278e0f323bdf29
-
SHA1
ed9bc3c90fcf48a68423491dec0adf4fd39dceb0
-
SHA256
17f67c1d6e4ab7cf7aaba1162fd69c0e8b381c394704f2d1f1f2bce14170523c
-
SHA512
12649225ce76b0becbdd70ce173c93178f83a42f4b99d40eb517a9d4b2ae0769168b66439438a0377584f42d8657833cdeee6f07c29541979881e07fbbbdaac1
-
SSDEEP
6144:vk3hOdsylKlgryzc4bNhZF+E+ZPUwKYU/nj7ku1X1L1Etyyysp5:+njp1X9
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
17f67c1d6e4ab7cf7aaba1162fd69c0e8b381c394704f2d1f1f2bce14170523c.xls windows office2003
Kangatang
ThisWorkbook
Sheet1