Behavioral task
behavioral1
Sample
2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3.xls
Resource
win10v2004-20240802-en
General
-
Target
2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3
-
Size
82KB
-
MD5
59df2c384f153b0d0b6cace5886c9448
-
SHA1
be81ce62fbeef6dafa3837ce2617d6e868af4873
-
SHA256
2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3
-
SHA512
98690d91b5710a92a0c103305002d45b6e0dd9b7af6f3640fe41bf9abc25643bdc52eb4f6a697c23de6b637e0bb86d26503b4a65e80d17f7e3fd5ddf5853716b
-
SSDEEP
1536:JOpUZ+RwPONXoRjDhIcp0fDlaGGx+cL/WE9CTakFeNHNubT+vH9sx9ifyCS4VGPS:kpUZ+RwPONXoRjDhIcp0fDlaGGx+cL/9
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
2867e911f8ab5fa2ddda79a3260e6b85ddb2781ee8ec13900fb5b7d36e1d55c3.xls windows office2003
Kangatang
ThisWorkbook