General

  • Target

    cf640f84b3f9ee6205172bd20a9ecb96703afda8a0cbfdfbb1fd888e96839244

  • Size

    188KB

  • MD5

    207b66de64235f3f798351f8826f6c9b

  • SHA1

    aa74d994fe9b4e4776ce0f46d171175bbf3f0080

  • SHA256

    cf640f84b3f9ee6205172bd20a9ecb96703afda8a0cbfdfbb1fd888e96839244

  • SHA512

    41180ddfef6a3a52ef83d1dc1633744df8ff9ceb65b98e9d2e21bf0bebf61cb40e83c37a154b2c031becdf804094f1dcffc7148c7cd98304a825ba8cdfd294b2

  • SSDEEP

    3072:RBCt3ZxosdMvT63mxMnkxHWmsuM1zpRcvBUG8272EAYhIXBI7O3+4Zbjc0wUdC+2:RBCt3ZxosdMvT63mxMnkxHWmsuMZpROE

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • cf640f84b3f9ee6205172bd20a9ecb96703afda8a0cbfdfbb1fd888e96839244
    .xls windows office2003

    Kangatang

    ThisWorkbook