Behavioral task
behavioral1
Sample
158739ccbf3559ad395b00429d5abdefaded2c795ac4875b1ba672d29e6eceb6.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
158739ccbf3559ad395b00429d5abdefaded2c795ac4875b1ba672d29e6eceb6.xls
Resource
win10v2004-20240802-en
General
-
Target
158739ccbf3559ad395b00429d5abdefaded2c795ac4875b1ba672d29e6eceb6
-
Size
53KB
-
MD5
4bc338e7de09b03d445b2dd3c2902a03
-
SHA1
0382584e1b73914f1e009fc61a05c2d3eb7009ff
-
SHA256
158739ccbf3559ad395b00429d5abdefaded2c795ac4875b1ba672d29e6eceb6
-
SHA512
59393923533efa66bff63dacd703a7bd6c7f0ac6b429b06c59992cfe6ad65466e03ed62fc730a3c1979dd045faf0ce38b04e437217909244d62dbb3b5e9bc39f
-
SSDEEP
768:ZnwWuzibtJsHesCi53J+9gLFFoeDDvXJ7mFQC7e+boLQ1IQ3xONQHsZ4Rs9aOCTs:zuziAk+WG6K
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
158739ccbf3559ad395b00429d5abdefaded2c795ac4875b1ba672d29e6eceb6.xls windows office2003
Kangatang
ThisWorkbook