Behavioral task
behavioral1
Sample
428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924.xls
Resource
win10v2004-20240802-en
General
-
Target
428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924
-
Size
152KB
-
MD5
1c7595d93228b68bafe9b59a004bc941
-
SHA1
5308d85d01e42587477f1aef5d8e72ddaf024938
-
SHA256
428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924
-
SHA512
3946c4617ac0e1019b849b7ed4a09121801d4d99219475758dbcc2880a2a7a0bd3c15c4e6edc48706aa12abb1d822a0452a55930ae457dc66399541543249886
-
SSDEEP
3072:DXYxEtjPOtioVjDGUU1qfDlaGGx+cKXI0AiUgxYmSS9oGLAwUJzh6:cxEtjPOtioVjDGUU1qfDlavx+XXI0Aif
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924.xls windows office2003
Kangatang
ThisWorkbook