Behavioral task
behavioral1
Sample
cb0c8c79881610787a11dd26c07439b63423a500a90b60c98fc969c3c3503fe5.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cb0c8c79881610787a11dd26c07439b63423a500a90b60c98fc969c3c3503fe5.xls
Resource
win10v2004-20240802-en
General
-
Target
cb0c8c79881610787a11dd26c07439b63423a500a90b60c98fc969c3c3503fe5
-
Size
94KB
-
MD5
169971ca5b720de5f0b7e0b30de894da
-
SHA1
cb65799c0fabf6155a47a85b5052287433297e3e
-
SHA256
cb0c8c79881610787a11dd26c07439b63423a500a90b60c98fc969c3c3503fe5
-
SHA512
dee0ee133f39a7668c01036ae3fe687e8fc708002342ac21d167c298acf792279f198492e0b602f628b0bf73cf382b206a8c6f97c384564c7cf66dac88f9da47
-
SSDEEP
1536:JLk3hbdlylKsgwyzcTbWhZFGkE+cLaxldBcGOMCCJkW/0wktrtNkNRQRy5+zvPed:JLk3hbdlylKsgwyzcTbWhZFGkE+cLaxu
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
cb0c8c79881610787a11dd26c07439b63423a500a90b60c98fc969c3c3503fe5.xls windows office2003
Kangatang
ThisWorkbook