General

  • Target

    27de76dfad2afbe35bd95df56a1d02bbfd57ad725b729f396a19b8a07ee5adf6

  • Size

    96KB

  • MD5

    63aa36c2952da191117237c1e04396c8

  • SHA1

    3116dfbc1d923e2a80f7efbd778305777e6689ce

  • SHA256

    27de76dfad2afbe35bd95df56a1d02bbfd57ad725b729f396a19b8a07ee5adf6

  • SHA512

    d3fb9d06444fd591f66643a294cdc3d308341af6f6ee56c8de73fafd2ed768dd4357b609902f8432b316c024e0668a11593b0d8ddd676091cfd7cc36b8fbd08e

  • SSDEEP

    3072:cMxEtjPOtioVjDGUU1qfDlaGGx+cL+LIfd2MfSx99dICuhw5MTAuYYfIzaipQRJq:vxEtjPOtioVjDGUU1qfDlavx+W+LIfdt

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 27de76dfad2afbe35bd95df56a1d02bbfd57ad725b729f396a19b8a07ee5adf6
    .xls windows office2003

    Kangatang