Behavioral task
behavioral1
Sample
b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad.xls
Resource
win10v2004-20240802-en
General
-
Target
b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad
-
Size
192KB
-
MD5
878ceaac71e9aa01e4e725653caaf916
-
SHA1
819bf4ef7e2d34bd9854da9523d67c6c538b2072
-
SHA256
b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad
-
SHA512
56d2ed308c36dafcbaf6ebcfebf2f84ebb54340d019a6e859141adec5be75abd2758e3269ce21d7f4286c1606d6c31d2246228597b4e8d25917dc4404199ce7f
-
SSDEEP
3072:H9XdpYkmZL4Zlt8D3676QpsaCqRK7bs/2Y6fL0/9Upyj6JJtG+2hEqqekWNL+9d6:9deLCmQ6QEsuJYVUpQP+2q0
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad.xls windows office2003
Kangatang
ThisWorkbook