Behavioral task
behavioral1
Sample
b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279.xls
Resource
win10v2004-20240802-en
General
-
Target
b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279
-
Size
4.0MB
-
MD5
a1df02dc246f3609d17531e8a74dad88
-
SHA1
2ac6e40b1098d6d2c6cc9f215aa9fd444fad3556
-
SHA256
b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279
-
SHA512
09bd0510f96d5f69d7d35fc4209870cf788170870234f5bf82c761ad59d13008bcc9d1d7b912d3e67ae0582de886fea63fb6f0260e90cc2834a3779e8ee5fe46
-
SSDEEP
12288:OOKh5YzFEw5bQ6un8WL68mfTPsH7uvxgbmriZ45lzcwzRTdZ5JUiHqfzte3ZRTzu:OOWI2eYuqfzWj6VNZrqiRwp3E/L
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279.xls windows office2003
Kangatang
ThisWorkbook