Behavioral task
behavioral1
Sample
c0eb728d356a7ea366d387487b3053d5c81025f077ab6c55bc379fbc46d58c62.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0eb728d356a7ea366d387487b3053d5c81025f077ab6c55bc379fbc46d58c62.xls
Resource
win10v2004-20240802-en
General
-
Target
c0eb728d356a7ea366d387487b3053d5c81025f077ab6c55bc379fbc46d58c62
-
Size
51KB
-
MD5
505bf1386147a80ce2ed8c7bbd995687
-
SHA1
7973886a8f1b0175ff3e483bd9cb60c629e42d00
-
SHA256
c0eb728d356a7ea366d387487b3053d5c81025f077ab6c55bc379fbc46d58c62
-
SHA512
874b4440cd0c550fcfc1b09114000fb0d68e950c3c7eac8398e07779ddaa2b5fc85bfb8ee90879c71f023f37d7b905c5666a69c5dfc31c6da8d4edc8b6d43baf
-
SSDEEP
1536:ZW1mHxEtjPOtioVjDGUU1qfDlaGGx+cW+LIfdAhnScmza86X:ZWSxEtjPOtioVjDGUU1qfDlaGGx+cW+F
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
c0eb728d356a7ea366d387487b3053d5c81025f077ab6c55bc379fbc46d58c62.xls windows office2003
Kangatang
ThisWorkbook