Behavioral task
behavioral1
Sample
3570f98a1dd0deac0f74c96b96043db3a26beac52292ae7f6a1883979104c378.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3570f98a1dd0deac0f74c96b96043db3a26beac52292ae7f6a1883979104c378.xls
Resource
win10v2004-20240802-en
General
-
Target
3570f98a1dd0deac0f74c96b96043db3a26beac52292ae7f6a1883979104c378
-
Size
1.2MB
-
MD5
47a027dc87346ea3225193a0be7c58cf
-
SHA1
43ee423024095fd4511a19ebebf78f2763f72df7
-
SHA256
3570f98a1dd0deac0f74c96b96043db3a26beac52292ae7f6a1883979104c378
-
SHA512
144928d2a77b3c7adba8807f9cefddb09930150cc2b3fc9a3c78ad462a8989a50b89082a497371c6eea595c16c38018fc6594daf952b75a06a19ef02927e43b3
-
SSDEEP
24576:Q4EbStG+5qmkJQapMVgbI4boD37TJMDi:ttG+slJQapMVgbToD3
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3570f98a1dd0deac0f74c96b96043db3a26beac52292ae7f6a1883979104c378.xls windows office2003
Kangatang
ThisWorkbook