General

  • Target

    983b41e68027037edc7616846420b27cd19276586883efea203f4ffc7ff7e29e

  • Size

    188KB

  • MD5

    fb1719f2c72770901cff4bb721f78f03

  • SHA1

    301aad871c6148e475cf184c0868d8e6aa239c47

  • SHA256

    983b41e68027037edc7616846420b27cd19276586883efea203f4ffc7ff7e29e

  • SHA512

    17cd9ffb92ad067b832e3f522ba41037cb56d116509d98c202e0c5174ee1c45c00235e9000c21881bbdb39103fdf9a2d46178c95b992e29ad78dd3844ce9a7db

  • SSDEEP

    3072:/sdJMTxEtjPOtioVjDGUU1qfDlaGGx+cLYIxAI1TlT98r2FOBmxZ5DQ0JDdxeH0a:U4TxEtjPOtioVjDGUU1qfDlavx+WYIxU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 983b41e68027037edc7616846420b27cd19276586883efea203f4ffc7ff7e29e
    .xls windows office2003

    Kangatang