Behavioral task
behavioral1
Sample
3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276.xls
Resource
win10v2004-20240802-en
General
-
Target
3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276
-
Size
49KB
-
MD5
c3ca7df1dc89712a16ecb9b97c348048
-
SHA1
68675c58c1a1f5d59916c8b1a41628592a916f0f
-
SHA256
3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276
-
SHA512
7a28adcea4af1149c5fbe52f0485505f4323e6c30440ca43957aee13236c05bc70d4805374363c4f5dabd912d4ebea6d6e67e36ff5872e9efd4384b2a6f39c9e
-
SSDEEP
1536:fW1mHxEtjPOtioVjDGUU1qfDlaGGx+cW+LIfdAhCY:fWSxEtjPOtioVjDGUU1qfDlaGGx+cW+E
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276.xls windows office2003
Kangatang
ThisWorkbook