General

  • Target

    b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad

  • Size

    192KB

  • MD5

    878ceaac71e9aa01e4e725653caaf916

  • SHA1

    819bf4ef7e2d34bd9854da9523d67c6c538b2072

  • SHA256

    b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad

  • SHA512

    56d2ed308c36dafcbaf6ebcfebf2f84ebb54340d019a6e859141adec5be75abd2758e3269ce21d7f4286c1606d6c31d2246228597b4e8d25917dc4404199ce7f

  • SSDEEP

    3072:H9XdpYkmZL4Zlt8D3676QpsaCqRK7bs/2Y6fL0/9Upyj6JJtG+2hEqqekWNL+9d6:9deLCmQ6QEsuJYVUpQP+2q0

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • b5e78357d97da35d95dcf61681d041c71bb939046d018cb8a02a510e0f1d00ad
    .xls windows office2003

    Kangatang

    ThisWorkbook