General

  • Target

    1262af7cba3a5c580fc7ec967febeb64e5dbd6f6d9cb62c6bdb51ee21da9d796

  • Size

    76KB

  • MD5

    c635624aa32b16b79c3422c88e4a5ef0

  • SHA1

    a11cbc309a9a816c8e0968b87bf1ce3b0db360b2

  • SHA256

    1262af7cba3a5c580fc7ec967febeb64e5dbd6f6d9cb62c6bdb51ee21da9d796

  • SHA512

    4b71cd9f45300ec3b8dcc2a5445e9b5f81124038ee5a8e6e8f612d1e4bec62ce211a17ccafc5debac9d04cd0cc5a8d37afa21da99ca301ccefba13af37264a29

  • SSDEEP

    1536:Q199k3hOdsylKlgryzc4bNhZFGzE+ch/gEA+Omu8BDoVpJDza86:Q199k3hOdsylKlgryzc4bNhZFGzE+ch/

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1262af7cba3a5c580fc7ec967febeb64e5dbd6f6d9cb62c6bdb51ee21da9d796
    .xls windows office2003

    Kangatang

    ThisWorkbook