General

  • Target

    f1d5cca45a8883e32ea25b1b37f4f721be106345ee89c9689d03dc0c80839510

  • Size

    187KB

  • MD5

    3de3a1d0534357e306c8da64d8a363c3

  • SHA1

    86b28135e0e6a74d1bd21bd81957608771f702fd

  • SHA256

    f1d5cca45a8883e32ea25b1b37f4f721be106345ee89c9689d03dc0c80839510

  • SHA512

    f60075ee685ce35f9ce88ab869d9e183f57f30256f774e0e5e21704a25a8a7f1566409fcdcac39ab66adaaf3f2fd4806a8ae382e6913cc752e1d1c79a68bb8b8

  • SSDEEP

    3072:J9XdpYmmZZ4Zlt8D5676QpsaCqRK7bs/2YxSABKVCVJo6JJt1OwuNaYqekWNL+9o:LdeVYm66QEsuKTMCVakOwu8

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • f1d5cca45a8883e32ea25b1b37f4f721be106345ee89c9689d03dc0c80839510
    .xls windows office2003

    Kangatang