Behavioral task
behavioral1
Sample
0c96e145e75d7b6a55af4cade7ae468746809f4ff5c448eb70f23d3a16324217.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c96e145e75d7b6a55af4cade7ae468746809f4ff5c448eb70f23d3a16324217.xls
Resource
win10v2004-20240802-en
General
-
Target
0c96e145e75d7b6a55af4cade7ae468746809f4ff5c448eb70f23d3a16324217
-
Size
1.7MB
-
MD5
874a355354f8dbeda9cdaa571adeb401
-
SHA1
a09fe5c274d8e55a1fd0d6136deb3ed1fe79cab8
-
SHA256
0c96e145e75d7b6a55af4cade7ae468746809f4ff5c448eb70f23d3a16324217
-
SHA512
b4fc711bcecea1a66895e2c39a078a069832ff1301dca488faa18f822796d86c8a3cbb9e4196b398d4950087b09aa5535c82d4747534f656bdeb79be4b508a9c
-
SSDEEP
12288:k2bmtHNrBW671DAnegpPaTRCiKO9ZViKpIbtisvnMTZT+KQ3v1i59N4ce:Utr9xBgJaTRCK9LRpuRMTZTHJe
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0c96e145e75d7b6a55af4cade7ae468746809f4ff5c448eb70f23d3a16324217.xls windows office2003
Kangatang
ThisWorkbook