Behavioral task
behavioral1
Sample
006d5e82e1ee2e539e7a40796c81aa01e399f03b6e6edc163980a97b65c3c16c.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
006d5e82e1ee2e539e7a40796c81aa01e399f03b6e6edc163980a97b65c3c16c.xls
Resource
win10v2004-20240802-en
General
-
Target
006d5e82e1ee2e539e7a40796c81aa01e399f03b6e6edc163980a97b65c3c16c
-
Size
78KB
-
MD5
9efac9a3d6c0ff0b0bed20e88754fa23
-
SHA1
97676d617fdf06b775b9b8f04bfbb8dece3ad832
-
SHA256
006d5e82e1ee2e539e7a40796c81aa01e399f03b6e6edc163980a97b65c3c16c
-
SHA512
89a25a5f7d730e80c7e41c8a8abbd1c962314026b48a6fcdb6a646dd3f2be0314ac914e23295d09c8c5f3061e1f500ec9d7585579a3153947a1e4c22c2248fcf
-
SSDEEP
1536:Cb2lk3hbdlylKsgqopeJBWhZFGkE+cM4Lxln3gcAi2dxMI5aFtPF:CbOk3hbdlylKsgqopeJBWhZFGkE+cM4f
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
006d5e82e1ee2e539e7a40796c81aa01e399f03b6e6edc163980a97b65c3c16c.xls windows office2003
Kangatang