General

  • Target

    688959e280445ccef9aef7e6f6d246ea20d1b2487309e0ff827f1bf9f332e92b

  • Size

    111KB

  • MD5

    344109ecb1dfa90ce4dc908e0d93143e

  • SHA1

    670c280f75b0da0fed7652320b16d7605681103a

  • SHA256

    688959e280445ccef9aef7e6f6d246ea20d1b2487309e0ff827f1bf9f332e92b

  • SHA512

    0337225a12db2643317e39a9a17c7ac6fad24b8f2731bf827c0e47940123628723d10d73bb35baf27240b7e3136a602fbc22b79abb86ee2fb01bfe1f5b7f849d

  • SSDEEP

    3072:8Fk3hbdlylKsgqopeJBWhZFGkE+cL4LxlnAnZ30W:2k3hbdlylKsgqopeJBWhZFVE+W4Lxln+

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 688959e280445ccef9aef7e6f6d246ea20d1b2487309e0ff827f1bf9f332e92b
    .xls windows office2003

    Kangatang

    ThisWorkbook