General

  • Target

    f69e398ea3aa8f64c60bca7009198e9f63a3ba0a269bd9f0a8a1b937f08465a8

  • Size

    57KB

  • MD5

    328f87379a2dd7c564104f38b73c4b97

  • SHA1

    5b4b0540aff9cf51e9cf54644c0010459afd886e

  • SHA256

    f69e398ea3aa8f64c60bca7009198e9f63a3ba0a269bd9f0a8a1b937f08465a8

  • SHA512

    bef4b4059f43375b4acdfb811865642ed824822259f84d92f8b9641031a9be27b1ad5ddb950b9cfadeb0b18f3aef6347f32e3a9cc21ecf88b89fde10d5343c95

  • SSDEEP

    384:krB1Hu4fzvZAA+riN0x8HT8kTYF5gPeQfABmWwt4n0wDE4nlZWRZJehg+hS1A:krB1Hu4VOriN0x8CftF3vfRZn

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f69e398ea3aa8f64c60bca7009198e9f63a3ba0a269bd9f0a8a1b937f08465a8
    .xls windows office2003

    Kangatang

    ThisWorkbook