Behavioral task
behavioral1
Sample
02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5.xls
Resource
win10v2004-20240802-en
General
-
Target
02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5
-
Size
137KB
-
MD5
61f58b6abc487355682779416b32ba64
-
SHA1
491d90d5afecbf21d4e9d4c8506952fcdea97bde
-
SHA256
02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5
-
SHA512
dd4e4b804711860e346d602ed141618397749836d8ba8e94e0c6bc41b9b524e2ccbfd9f3fb68a82d8b6b4404618ed871c99730bdc7803829a957d46e6239a9ee
-
SSDEEP
3072:eL+DxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAIuFm/6gw5iICGmrdUbhp3H3/3WR:nxEtjPOtioVjDGUU1qfDlavx+W+LIfdM
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
02c90f7a923a6158243cd64e60daa2a9470b2cbad74c4f9492c23d81c693aeb5.xls windows office2003
Kangatang
ThisWorkbook