Behavioral task
behavioral1
Sample
2bde0075468d261c505c185ee21a99da3ba958dd122a43c2da59abc9d6e240c3.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bde0075468d261c505c185ee21a99da3ba958dd122a43c2da59abc9d6e240c3.xls
Resource
win10v2004-20240802-en
General
-
Target
2bde0075468d261c505c185ee21a99da3ba958dd122a43c2da59abc9d6e240c3
-
Size
52KB
-
MD5
8221c343a1c5eca824a7b1916dc047ef
-
SHA1
993e04c7b7738f5109917029980a6fd0a3f329fb
-
SHA256
2bde0075468d261c505c185ee21a99da3ba958dd122a43c2da59abc9d6e240c3
-
SHA512
a677bdf869d2feaa624df5bd9c010e531a86dc09087a3c5cf03da6765e90f6f08c782e971e8aa8616bc87bb088124929aae287e219c12aad9178516008673d89
-
SSDEEP
1536:cXY35qAOJl/YrLYz+WrNhZFGzE+cL4LNldAT+WojWtbL:kY35qAOJl/YrLYz+WrNhZFGzE+cL4LNK
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
2bde0075468d261c505c185ee21a99da3ba958dd122a43c2da59abc9d6e240c3.xls windows office2003
Kangatang
ThisWorkbook