General

  • Target

    b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279

  • Size

    4.0MB

  • MD5

    a1df02dc246f3609d17531e8a74dad88

  • SHA1

    2ac6e40b1098d6d2c6cc9f215aa9fd444fad3556

  • SHA256

    b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279

  • SHA512

    09bd0510f96d5f69d7d35fc4209870cf788170870234f5bf82c761ad59d13008bcc9d1d7b912d3e67ae0582de886fea63fb6f0260e90cc2834a3779e8ee5fe46

  • SSDEEP

    12288:OOKh5YzFEw5bQ6un8WL68mfTPsH7uvxgbmriZ45lzcwzRTdZ5JUiHqfzte3ZRTzu:OOWI2eYuqfzWj6VNZrqiRwp3E/L

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • b96160d676d262cb9dbc9e177ebc38a1a831bbdf674edf43075cdfc43eaab279
    .xls windows office2003

    Kangatang

    ThisWorkbook