General

  • Target

    02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5

  • Size

    137KB

  • MD5

    61f58b6abc487355682779416b32ba64

  • SHA1

    491d90d5afecbf21d4e9d4c8506952fcdea97bde

  • SHA256

    02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5

  • SHA512

    dd4e4b804711860e346d602ed141618397749836d8ba8e94e0c6bc41b9b524e2ccbfd9f3fb68a82d8b6b4404618ed871c99730bdc7803829a957d46e6239a9ee

  • SSDEEP

    3072:eL+DxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAIuFm/6gw5iICGmrdUbhp3H3/3WR:nxEtjPOtioVjDGUU1qfDlavx+W+LIfdM

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5
    .xls windows office2003

    Kangatang

    ThisWorkbook