General

  • Target

    8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e

  • Size

    4.0MB

  • MD5

    6897d92a49af82b3269ead11e48d7ae1

  • SHA1

    c856d641817abf26c2c73b84356e45d2dc1a5ed5

  • SHA256

    8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e

  • SHA512

    e8172ef87e730bbab7865bc4d48202d1ed32ca8f46ca2c90526ca7f54a994a2b6bfea6b983e79d1d80f646d9fdc6fdd12215f578c5263ad43cbcfc12ea6167fe

  • SSDEEP

    12288:DOKh5YzFEw5bQ6un8WL68mfTPsH7uvxgbmriZ45lzcwzRTdZ5JUiHqfzte3ZRTzu:DOWI2eYuqfzWj6VNZrqiRwp3E/L

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e
    .xls windows office2003

    Kangatang

    ThisWorkbook