Behavioral task
behavioral1
Sample
33627154120d08ff6f18a76aa88943ff35cef20eea70c23f737ea68f80256cba.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
33627154120d08ff6f18a76aa88943ff35cef20eea70c23f737ea68f80256cba.xls
Resource
win10v2004-20240802-en
General
-
Target
33627154120d08ff6f18a76aa88943ff35cef20eea70c23f737ea68f80256cba
-
Size
75KB
-
MD5
a40d8952e85763ff3fd44159d07208ee
-
SHA1
03f4a074505fd2e65abdd7b5012f597d16bbdb2c
-
SHA256
33627154120d08ff6f18a76aa88943ff35cef20eea70c23f737ea68f80256cba
-
SHA512
162eac521388e772bc0d76072a0580fee9ef41a9a340f9e9b720d773e80d7bc81c27b9826b2285f93013d3fa00a3da5a66d3f358bc8105cf3326a36d59e95c2e
-
SSDEEP
768:IB1Hu4iHRriERRu56gdT284jzNdwnutTshODVb52za86mv:wqHRriEruDIuhODVUza86m
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
33627154120d08ff6f18a76aa88943ff35cef20eea70c23f737ea68f80256cba.xls windows office2003
Kangatang
ThisWorkbook