Behavioral task
behavioral1
Sample
70a583f818df6a01fa64bd89b095600fd2942d471ac9adbccdc4693302354771.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70a583f818df6a01fa64bd89b095600fd2942d471ac9adbccdc4693302354771.xls
Resource
win10v2004-20240802-en
General
-
Target
70a583f818df6a01fa64bd89b095600fd2942d471ac9adbccdc4693302354771
-
Size
4.0MB
-
MD5
fe2144ee32a2bda9e9116954dd6bb93b
-
SHA1
9c5c7a3970cb80cd3cead7bdd64eba8b0ca64697
-
SHA256
70a583f818df6a01fa64bd89b095600fd2942d471ac9adbccdc4693302354771
-
SHA512
a943c803160e912d1c2fa80ffa7414202f39c46d1aeba584dfd4a98e56a6d26138394bb3963ff0361869d553f936afccf1cf799c8cfee735e0ef0fb34ee44105
-
SSDEEP
12288:IOKh5YzFEw5bQ6un8WL68mfTPsH7uvxgbmriZ45lzcwzRTdZ5JUiHqfzte3ZRTzu:IOWI2eYuqfzWj6VNZrqiRwp3E/L
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
70a583f818df6a01fa64bd89b095600fd2942d471ac9adbccdc4693302354771.xls windows office2003
Kangatang
ThisWorkbook