Behavioral task
behavioral1
Sample
fa8f99830ba7e439c82bac13901acf9dcc48c38e46d4712f5ad897dab0b3758a.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa8f99830ba7e439c82bac13901acf9dcc48c38e46d4712f5ad897dab0b3758a.xls
Resource
win10v2004-20240802-en
General
-
Target
fa8f99830ba7e439c82bac13901acf9dcc48c38e46d4712f5ad897dab0b3758a
-
Size
82KB
-
MD5
2ce7a8b12529b9ad4fe4f668602063f1
-
SHA1
3d5deb8ec14ed1a5749458fd684e0599a3d1397a
-
SHA256
fa8f99830ba7e439c82bac13901acf9dcc48c38e46d4712f5ad897dab0b3758a
-
SHA512
13687198ccdf7be33d934dd904b869da1d3f5ece7186817aa260e6d6f43ef7ca8eddf7d04ac48bb35a652e8576bf5824378071b151d39c4413eb2fa55782c76a
-
SSDEEP
1536:NOxwXxEtjPOtioVjDGUU1qfDlaGGx+cL/IEPCTakFeNHNubTClbwx13A8xW3EDGI:AxwXxEtjPOtioVjDGUU1qfDlaGGx+cL+
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
fa8f99830ba7e439c82bac13901acf9dcc48c38e46d4712f5ad897dab0b3758a.xls windows office2003
Kangatang
ThisWorkbook