General

  • Target

    d0be277042ff7562334499fba4bda0aed159ed94393edff1f8a37247e4dadf1c

  • Size

    82KB

  • MD5

    7792cb40cf0373545eb2cd1405c5190e

  • SHA1

    c540b2591f4e5eced38f23619f2256509c04cc0f

  • SHA256

    d0be277042ff7562334499fba4bda0aed159ed94393edff1f8a37247e4dadf1c

  • SHA512

    3430024abb8563c35844af34ed6dd6d4abc1f3c71cacee6ade41d1c139e3f188d020603654dc8f7f4ca55f458422fc910ec0b491e1ebe9f58fa8170d69dd0561

  • SSDEEP

    1536:XOpUZ+RwPONXoRjDhIcp0fDlaGGx+cL/WE9CTakFeNHNubT+vH9sx9ifyCS4VGPS:+pUZ+RwPONXoRjDhIcp0fDlaGGx+cL/9

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • d0be277042ff7562334499fba4bda0aed159ed94393edff1f8a37247e4dadf1c
    .xls windows office2003

    Kangatang

    ThisWorkbook