Behavioral task
behavioral1
Sample
eae1d8970cf1c25446cdae65c26da7f87ddc8da3ac783c98287e3b8b117ffff0.xls
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
eae1d8970cf1c25446cdae65c26da7f87ddc8da3ac783c98287e3b8b117ffff0.xls
Resource
win10v2004-20240802-en
General
-
Target
eae1d8970cf1c25446cdae65c26da7f87ddc8da3ac783c98287e3b8b117ffff0
-
Size
1.4MB
-
MD5
ed696117025aa2ff281c2ec597a7b6c4
-
SHA1
d206fca67a39f0ad11ddf4faeff0419077f8cada
-
SHA256
eae1d8970cf1c25446cdae65c26da7f87ddc8da3ac783c98287e3b8b117ffff0
-
SHA512
89a0e27700f310ebf0fd24431c70c9142f222cb74e571f9397d6a9e1e0bf0b94449cb0a5f1d5cda24bd00fbca7adf4aecb4f81ba4637f35e90a2e5bb7fb016b1
-
SSDEEP
24576:ED5hkdyIQ3bND//E3d5p5qolP3mpwAttNN1tVjAmpxOsr5FM7un:afDBz8KoB3mpBX5Frn
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
eae1d8970cf1c25446cdae65c26da7f87ddc8da3ac783c98287e3b8b117ffff0.xls windows office2003
Kangatang