Behavioral task
behavioral1
Sample
cb3fa996bb4a47a5ce0cf101860fc36ee12dca2c578a8e34570a2f7907ef309c.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cb3fa996bb4a47a5ce0cf101860fc36ee12dca2c578a8e34570a2f7907ef309c.xls
Resource
win10v2004-20240802-en
General
-
Target
cb3fa996bb4a47a5ce0cf101860fc36ee12dca2c578a8e34570a2f7907ef309c
-
Size
89KB
-
MD5
34f54cdac061d0d917632ece6f3bee79
-
SHA1
ee5f78116838c61e1a1fa6d966faf4c5fb79ff5a
-
SHA256
cb3fa996bb4a47a5ce0cf101860fc36ee12dca2c578a8e34570a2f7907ef309c
-
SHA512
6bd050c385ae39f298f58fd68fee21f4e4e627575fab99a8a207588adffa677a0d7d1a1f2f5dca23950dd1c86c81e56333e201ef7ca66785848145617c72e6fe
-
SSDEEP
1536:XjxEtjPOtioVjDGUU1qfDlaGGx+cL/IEnZTgm0YTRyNmCxoXfAoYK/+Gciw:XjxEtjPOtioVjDGUU1qfDlaGGx+cL/Iq
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
cb3fa996bb4a47a5ce0cf101860fc36ee12dca2c578a8e34570a2f7907ef309c.xls windows office2003
Kangatang
ThisWorkbook