Behavioral task
behavioral1
Sample
4f7bfdcaf156bcd339bbd62857d0ad148c081db422561105ea87a0d69bde4dc3.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4f7bfdcaf156bcd339bbd62857d0ad148c081db422561105ea87a0d69bde4dc3.xls
Resource
win10v2004-20240802-en
General
-
Target
4f7bfdcaf156bcd339bbd62857d0ad148c081db422561105ea87a0d69bde4dc3
-
Size
85KB
-
MD5
d876b748506c7e1a000ee710c870f814
-
SHA1
c794afb8077aca88f9179221d61a3765647423a6
-
SHA256
4f7bfdcaf156bcd339bbd62857d0ad148c081db422561105ea87a0d69bde4dc3
-
SHA512
b1c7307ba6eb851a597ada9f1a1b475890ed804689104f64d1309a46cbbb5f981bb46108bb70fc3c4057ebba5b8db01de07ac7bf39a6b51974c0baf9a3677267
-
SSDEEP
1536:EjxEtjPOtioVjDGUU1qfDlaGGx+cL/IEfZTgm0YTRyNtCZopfEop:EjxEtjPOtioVjDGUU1qfDlaGGx+cL/If
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
4f7bfdcaf156bcd339bbd62857d0ad148c081db422561105ea87a0d69bde4dc3.xls windows office2003
Kangatang
ThisWorkbook