Behavioral task
behavioral1
Sample
8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e.xls
Resource
win10v2004-20240802-en
General
-
Target
8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e
-
Size
4.0MB
-
MD5
6897d92a49af82b3269ead11e48d7ae1
-
SHA1
c856d641817abf26c2c73b84356e45d2dc1a5ed5
-
SHA256
8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e
-
SHA512
e8172ef87e730bbab7865bc4d48202d1ed32ca8f46ca2c90526ca7f54a994a2b6bfea6b983e79d1d80f646d9fdc6fdd12215f578c5263ad43cbcfc12ea6167fe
-
SSDEEP
12288:DOKh5YzFEw5bQ6un8WL68mfTPsH7uvxgbmriZ45lzcwzRTdZ5JUiHqfzte3ZRTzu:DOWI2eYuqfzWj6VNZrqiRwp3E/L
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
8bf2b22a29647413d97ba0e35ac8898d97e43a140fe37df4774d5e3983941c3e.xls windows office2003
Kangatang
ThisWorkbook