Behavioral task
behavioral1
Sample
2144bb0ab5c46a0cee659a189f9570a3878b4080ccf909d49ed7b1862c3a6687.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2144bb0ab5c46a0cee659a189f9570a3878b4080ccf909d49ed7b1862c3a6687.xls
Resource
win10v2004-20240802-en
General
-
Target
2144bb0ab5c46a0cee659a189f9570a3878b4080ccf909d49ed7b1862c3a6687
-
Size
1.9MB
-
MD5
a5c0f18ad83878001ee9296596f5d1ed
-
SHA1
ca1809c1918a56c2930fafe2b8bcdcbdbd723de0
-
SHA256
2144bb0ab5c46a0cee659a189f9570a3878b4080ccf909d49ed7b1862c3a6687
-
SHA512
58bdaf0036ca97e8901259eb52b2b3586051d35bb9d070f947a547ca6b8c8692fd7baf23eb1815113344056373fa9159f9e26c1e03be2667079e34423febf4cd
-
SSDEEP
12288:R26Ph6ZBy9QHQA9+9iw65591cXF1lxWlKFcVL4lm/+78:06P4HQu+Q1cXDXWVUMW78
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
2144bb0ab5c46a0cee659a189f9570a3878b4080ccf909d49ed7b1862c3a6687.xls windows office2003
Kangatang
ThisWorkbook