General

  • Target

    3d2a081981951720387fcb3ff6e5292ecf3b7257f9de8597257dae2a3fa5713d

  • Size

    189KB

  • MD5

    b6a52d089775c780a21a347b7db79671

  • SHA1

    bb2aea4a8da0d8cf4a4b6e9f6db9b242715b3f51

  • SHA256

    3d2a081981951720387fcb3ff6e5292ecf3b7257f9de8597257dae2a3fa5713d

  • SHA512

    3bbf899b4a6914351a0eb477acaa68d0987485b9720b00081afeb020c7c8dbe990d7301b228924ea63f0fbb08e2c2e6d1218186cd247a609a517f6e6d6891392

  • SSDEEP

    3072:MJe6O9qbVNcryn4c5tmDV0Ak3hOdsylKlgxopeiBNhZFGzE+cL4LglnA+3o6BVqs:oe6O9GVNcrynbtmDVbk3hOdsylKlgxoc

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3d2a081981951720387fcb3ff6e5292ecf3b7257f9de8597257dae2a3fa5713d
    .xls windows office2003

    Kangatang

    ThisWorkbook