General

  • Target

    3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276

  • Size

    49KB

  • MD5

    c3ca7df1dc89712a16ecb9b97c348048

  • SHA1

    68675c58c1a1f5d59916c8b1a41628592a916f0f

  • SHA256

    3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276

  • SHA512

    7a28adcea4af1149c5fbe52f0485505f4323e6c30440ca43957aee13236c05bc70d4805374363c4f5dabd912d4ebea6d6e67e36ff5872e9efd4384b2a6f39c9e

  • SSDEEP

    1536:fW1mHxEtjPOtioVjDGUU1qfDlaGGx+cW+LIfdAhCY:fWSxEtjPOtioVjDGUU1qfDlaGGx+cW+E

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 3ea6176b1c7d80b54bc7b7e0b6f2b966ff68beb66903ff89d24e439d5bc64276
    .xls windows office2003

    Kangatang

    ThisWorkbook