General

  • Target

    2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3

  • Size

    82KB

  • MD5

    59df2c384f153b0d0b6cace5886c9448

  • SHA1

    be81ce62fbeef6dafa3837ce2617d6e868af4873

  • SHA256

    2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3

  • SHA512

    98690d91b5710a92a0c103305002d45b6e0dd9b7af6f3640fe41bf9abc25643bdc52eb4f6a697c23de6b637e0bb86d26503b4a65e80d17f7e3fd5ddf5853716b

  • SSDEEP

    1536:JOpUZ+RwPONXoRjDhIcp0fDlaGGx+cL/WE9CTakFeNHNubT+vH9sx9ifyCS4VGPS:kpUZ+RwPONXoRjDhIcp0fDlaGGx+cL/9

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3
    .xls windows office2003

    Kangatang

    ThisWorkbook