General

  • Target

    a664bf18ea879196aaf1289f15e92af6d10378e10ff643d262349bfd643ee0f0

  • Size

    403KB

  • MD5

    f2d910bf8eac48fd38d4ef9f340f46b5

  • SHA1

    4a0fc88e7178f45c0983b1fc32ce588ef46b8fe5

  • SHA256

    a664bf18ea879196aaf1289f15e92af6d10378e10ff643d262349bfd643ee0f0

  • SHA512

    6e239014ea06f046b8c7572136b44b6f2f6abe7e72764295a7625082bbdcb57bb35cff2bf13aac16d8bdcebeef0b6d3a0f98cb23680ac0c9383c018cb17f24da

  • SSDEEP

    12288:WVT5TFDRBEbPnT/uGy9mvs6xHVMX3xpLZDNmmirjt+0hrwHO8E2e4CwTAEuiv6A1:WVT5TFDRtb

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • a664bf18ea879196aaf1289f15e92af6d10378e10ff643d262349bfd643ee0f0
    .xls windows office2003

    Kangatang