Behavioral task
behavioral1
Sample
cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc.xls
Resource
win10v2004-20240802-en
General
-
Target
cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc
-
Size
743KB
-
MD5
7ed112aa27009be7e6d981c4fdab0e65
-
SHA1
7be4a9b84a35906a9e5ef21739789df9b8b29b0d
-
SHA256
cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc
-
SHA512
029b87afb28d71d833ceac5f0565a76e70b94a5706001986119c77ca080329794073b2152bb4159bd0c5632291305749d54a02e9eb0c224def897039bb627cba
-
SSDEEP
6144:TQzl3ZpWh+Q8uMdS9dSttRJwyyGZRMDJQ2r4mm5qEyo3hPO1UZgUpvPTiyPp2ae9:3K2LNo3IUdFBPcaeSZJrLJJN
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
cf9aecee6ff16a8319f7cddc0cdf84dc09f23790f7b55470adf9e267a74a50dc.xls windows office2003
Kangatang
ThisWorkbook