General

  • Target

    db9da3bfde6430047e639963c9554498c6cda41c336eea895c9d8090b934a916

  • Size

    78KB

  • MD5

    e9fb35d7eb46955a59eb27219358302c

  • SHA1

    b7d65fbb1f66903199bd9966887227d775841f66

  • SHA256

    db9da3bfde6430047e639963c9554498c6cda41c336eea895c9d8090b934a916

  • SHA512

    83334bd1ea010e7e96b453795f661199f62a2882a005d5ac7dc8ee18de12094b02a5364499659119a2e6d1fdf32370df6763404f6f7baed763f7507f87b8a2fd

  • SSDEEP

    1536:rb2lk3hbdlylKsgqopeJBWhZFGkE+cM4LxlnA1cA3vdlI5aFtPh:rbOk3hbdlylKsgqopeJBWhZFGkE+cM4G

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • db9da3bfde6430047e639963c9554498c6cda41c336eea895c9d8090b934a916
    .xls windows office2003

    Kangatang