General

  • Target

    cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc

  • Size

    743KB

  • MD5

    7ed112aa27009be7e6d981c4fdab0e65

  • SHA1

    7be4a9b84a35906a9e5ef21739789df9b8b29b0d

  • SHA256

    cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc

  • SHA512

    029b87afb28d71d833ceac5f0565a76e70b94a5706001986119c77ca080329794073b2152bb4159bd0c5632291305749d54a02e9eb0c224def897039bb627cba

  • SSDEEP

    6144:TQzl3ZpWh+Q8uMdS9dSttRJwyyGZRMDJQ2r4mm5qEyo3hPO1UZgUpvPTiyPp2ae9:3K2LNo3IUdFBPcaeSZJrLJJN

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc
    .xls windows office2003

    Kangatang

    ThisWorkbook