General

  • Target

    79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f

  • Size

    242KB

  • MD5

    27c0998f3df3ecbaea7750148b35aa14

  • SHA1

    8d732992cb501c4488a7f548fb5fcc8a55a6e36c

  • SHA256

    79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f

  • SHA512

    44fbbfc8ae75581034c8ec865fdb6aaef7813f1f67624a6d5b7ea0e3a1b4bcd7d53542919e74ed1ab94cea8b6ef6c01b22b1f93e84db7d1967388b801f367de8

  • SSDEEP

    6144:Zk3hOdsylKlgryzc4bNhZF+E+W4LgldAo+A5NuWK6CjLNncnS:i+ADuW3GxcnS

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • 79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f
    .xls windows office2003

    Kangatang

    ThisWorkbook