Behavioral task
behavioral1
Sample
3c2d5a635998da9c42c3df82be9e7b86b16383641d87a2f50da40d2cb7b9757d.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c2d5a635998da9c42c3df82be9e7b86b16383641d87a2f50da40d2cb7b9757d.xls
Resource
win10v2004-20240802-en
General
-
Target
3c2d5a635998da9c42c3df82be9e7b86b16383641d87a2f50da40d2cb7b9757d
-
Size
143KB
-
MD5
2c4cfb1bf30d9ef0b9caf705bdb0af0d
-
SHA1
5373e021e92ef7deda9531ac365d77abc61bfa12
-
SHA256
3c2d5a635998da9c42c3df82be9e7b86b16383641d87a2f50da40d2cb7b9757d
-
SHA512
fc16df85981da7b523e66a5a6e6c1ab8c86d648804ad00d28f1202b09f22609f48ea7434d437d9e06cf8775febb6753efbd799696e5e90f90932338f96f4041a
-
SSDEEP
3072:SFZrZnBAKo+I6qY+g6QJP1nBfo0GMtxEtjPOtioVjDGUU1qfDlaGGx+cOpqIJ+AS:OZrZnBAKo+I6qY+g6QJP1nBfo0GMtxEH
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
3c2d5a635998da9c42c3df82be9e7b86b16383641d87a2f50da40d2cb7b9757d.xls windows office2003
Kangatang
ThisWorkbook