General

  • Target

    523fffa2752c4521909ee1fbcb8e9863ac0477c1fc3a0b13dec74bff0a552869

  • Size

    188KB

  • MD5

    82ad87062a03e4c201079ea55f798d48

  • SHA1

    4b6a4eee64584e9223fecdf18958c81b6d7ac76c

  • SHA256

    523fffa2752c4521909ee1fbcb8e9863ac0477c1fc3a0b13dec74bff0a552869

  • SHA512

    17215d1d7b5bcd684542653d3168efc4dd547d9691c7b2b01dbd7b943303bb3b7426289223bf0d6aa206e298be82a51e45f861b7888a7ee193ef7ed46a48604a

  • SSDEEP

    3072:xsdJMTxEtjPOtioVjDGUU1qfDlaGGx+cLYIxAI1TlT98r2FOBmxZ5DQ0JDdxeH0a:e4TxEtjPOtioVjDGUU1qfDlavx+WYIxU

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 523fffa2752c4521909ee1fbcb8e9863ac0477c1fc3a0b13dec74bff0a552869
    .xls windows office2003

    Kangatang