Behavioral task
behavioral1
Sample
1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f.xls
Resource
win10v2004-20240802-en
General
-
Target
1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f
-
Size
137KB
-
MD5
b47cff5b2d31f20acc7cb52b02789b1b
-
SHA1
516afe1d3d4c813c26b6b1f4a7e67303caea4d65
-
SHA256
1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f
-
SHA512
c07a0b3e116762971e6a253ae70f3807f37467ae724bad223789bf1322d8cab5dc0aac1bc3e57e8bb34469714d558448f70beee4107771fd0291f743e44e82ee
-
SSDEEP
3072:rL+fxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfdAxuFm/6gw5iICGmrdUbhp3H3/3WT:0xEtjPOtioVjDGUU1qfDlavx+W+LIfdC
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
1fd272ff09b2be575d2d08c7edf1bcdebc2fc04f5b479a549ab0c2a00fb1db3f.xls windows office2003
Kangatang
ThisWorkbook