Behavioral task
behavioral1
Sample
79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f.xls
Resource
win10v2004-20240802-en
General
-
Target
79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f
-
Size
242KB
-
MD5
27c0998f3df3ecbaea7750148b35aa14
-
SHA1
8d732992cb501c4488a7f548fb5fcc8a55a6e36c
-
SHA256
79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f
-
SHA512
44fbbfc8ae75581034c8ec865fdb6aaef7813f1f67624a6d5b7ea0e3a1b4bcd7d53542919e74ed1ab94cea8b6ef6c01b22b1f93e84db7d1967388b801f367de8
-
SSDEEP
6144:Zk3hOdsylKlgryzc4bNhZF+E+W4LgldAo+A5NuWK6CjLNncnS:i+ADuW3GxcnS
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource yara_rule sample office_xlm_macros
Files
-
79d1e0c59258a2e7810bfc1b7b13910920ede36e07972ad6cbe9cf20c428815f.xls windows office2003
Kangatang
ThisWorkbook