General

  • Target

    d97ff91ce5945eaeefee4f018f5e1536651128bdc1852e8f0f29b819e0905ac9

  • Size

    193KB

  • MD5

    5397d5f6742ecf8037af59340234266c

  • SHA1

    6661d29b46b3555f9b3493aa9cfc7999c4926ab7

  • SHA256

    d97ff91ce5945eaeefee4f018f5e1536651128bdc1852e8f0f29b819e0905ac9

  • SHA512

    a665a90283afee71140b5de8cb7ac33a1c530c98e576decd6a69a45486bd418163bebc5dc8ef6425b17170541f090945b3ef7af4a7abcdff80d8830daae9d59e

  • SSDEEP

    6144:/J7xEtjPOtioVjDGUU1qfDlavx+WYIxA7mZcwd:o6wd

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d97ff91ce5945eaeefee4f018f5e1536651128bdc1852e8f0f29b819e0905ac9
    .xls windows office2003

    Kangatang

    ThisWorkbook