General

  • Target

    1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f

  • Size

    137KB

  • MD5

    b47cff5b2d31f20acc7cb52b02789b1b

  • SHA1

    516afe1d3d4c813c26b6b1f4a7e67303caea4d65

  • SHA256

    1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f

  • SHA512

    c07a0b3e116762971e6a253ae70f3807f37467ae724bad223789bf1322d8cab5dc0aac1bc3e57e8bb34469714d558448f70beee4107771fd0291f743e44e82ee

  • SSDEEP

    3072:rL+fxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAxuFm/6gw5iICGmrdUbhp3H3/3WT:0xEtjPOtioVjDGUU1qfDlavx+W+LIfdC

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f
    .xls windows office2003

    Kangatang

    ThisWorkbook