Behavioral task
behavioral1
Sample
d243beb8768aab00716f03bb83cba6f940a33bd4d88521027b9fa2475c9a8e47.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d243beb8768aab00716f03bb83cba6f940a33bd4d88521027b9fa2475c9a8e47.xls
Resource
win10v2004-20240802-en
General
-
Target
d243beb8768aab00716f03bb83cba6f940a33bd4d88521027b9fa2475c9a8e47
-
Size
81KB
-
MD5
88a729534db3ee59155e8351e74517c3
-
SHA1
09adb7a28f1a07bee272606a3da7d57befd49c6b
-
SHA256
d243beb8768aab00716f03bb83cba6f940a33bd4d88521027b9fa2475c9a8e47
-
SHA512
d225a8d12df2bae541fc4d1b0d697994b6000e875f6e524031e5b568d4cad8ec66c473d0580acbf38a4eb2bf51b7f348e20cd1e809b7d21143fede06c4876032
-
SSDEEP
1536:POxwXxEtjPOtioVjDGUU1qfDlaGGx+cL/IEPCTakFeNHNubT9lbwx13A8xW3EAGg:mxwXxEtjPOtioVjDGUU1qfDlaGGx+cLr
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
d243beb8768aab00716f03bb83cba6f940a33bd4d88521027b9fa2475c9a8e47.xls windows office2003
Kangatang
ThisWorkbook