1b6b467b6190eb92081288617e7780c6eef90db15bc0a1c567764722bed055e5

General

Target

1b6b467b6190eb92081288617e7780c6eef90db15bc0a1c567764722bed055e5
Size

1.4MB
MD5

a5238dffe9f37fb5ca1bd161eb149404
SHA1

066a2f803b3c448cfb824023359e44f1ed04842a
SHA256

1b6b467b6190eb92081288617e7780c6eef90db15bc0a1c567764722bed055e5
SHA512

c9d6ff96e6fa9917553b68e4033e7c1494190bd9fac6c3fda9f452a67274994f0dde3798c97c9958271b3bdefd9c2cc67697c601aaa8793914b71a4069b0b9da
SSDEEP

24576:hD5hkdyIQ3bND//E3d5p5qolP3mpwAttNN1tVjAmpxOsr5FM7un:zfDBz8KoB3mpBX5Frn

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action

Suspicious Office macro 1 IoCs

Office document equipped with macros.

resource
sample

1b6b467b6190eb92081288617e7780c6eef90db15bc0a1c567764722bed055e5
.xls windows office2003

Kangatang