Behavioral task
behavioral1
Sample
4bcec8d00b0f201feb6bd1bc4580cd35683aa1c4d667433d6883d725a8d01039.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4bcec8d00b0f201feb6bd1bc4580cd35683aa1c4d667433d6883d725a8d01039.xls
Resource
win10v2004-20240802-en
General
-
Target
4bcec8d00b0f201feb6bd1bc4580cd35683aa1c4d667433d6883d725a8d01039
-
Size
53KB
-
MD5
f303a7e53ed82c83c6a8e17e2b9dfb9e
-
SHA1
893f6be70ba7469052b2979b233965bc153ee178
-
SHA256
4bcec8d00b0f201feb6bd1bc4580cd35683aa1c4d667433d6883d725a8d01039
-
SHA512
27718f030aa6a2229d170813a0654428f25152721953cb7d56797338b846ca69c59fce7f7dc9d0ab8c4f85604ac3a408a67126b9b3f7b2364880899632885a37
-
SSDEEP
768:Z6wWkzibtJsHesCi53J+9gLFFoeDDvXJ7mFQC7e+boLQ1IQ3xONQHsZ4Rs9aOCTS:GkziAkF7ea7M5
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
4bcec8d00b0f201feb6bd1bc4580cd35683aa1c4d667433d6883d725a8d01039.xls windows office2003
Kangatang
ThisWorkbook