General

  • Target

    428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924

  • Size

    152KB

  • MD5

    1c7595d93228b68bafe9b59a004bc941

  • SHA1

    5308d85d01e42587477f1aef5d8e72ddaf024938

  • SHA256

    428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924

  • SHA512

    3946c4617ac0e1019b849b7ed4a09121801d4d99219475758dbcc2880a2a7a0bd3c15c4e6edc48706aa12abb1d822a0452a55930ae457dc66399541543249886

  • SSDEEP

    3072:DXYxEtjPOtioVjDGUU1qfDlaGGx+cKXI0AiUgxYmSS9oGLAwUJzh6:cxEtjPOtioVjDGUU1qfDlavx+XXI0Aif

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 428fb370472e4a878669feac77dc87af3e5b0a73a3c4b0d2ed151f56c6dda924
    .xls windows office2003

    Kangatang

    ThisWorkbook