General

  • Target

    214f030dfc5395bdf9f1567c06f6e03e8d63ff21a2a21aa79eeeaf8ab74e39ae

  • Size

    185KB

  • MD5

    b9cd4caa7a581c0a4c0bd5877312a960

  • SHA1

    141e336733121aa8dbd4bdb68d52f7de2eda5a01

  • SHA256

    214f030dfc5395bdf9f1567c06f6e03e8d63ff21a2a21aa79eeeaf8ab74e39ae

  • SHA512

    f38d7e84ed4308c656daee620a4cd0b5b8196bf40758434fe8eecb7e2a64d1d00fdc8bcef522dd725bcda9c57fd6ce810f683dae0b2dff1c970f445d4adc87ad

  • SSDEEP

    3072:xyk3hOdsylKlgryzc4bNhZFGzE+cL2knAkEK9PyPQG4DYZC9qBScBy:Uk3hOdsylKlgryzc4bNhZF+E+W2knAkC

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 214f030dfc5395bdf9f1567c06f6e03e8d63ff21a2a21aa79eeeaf8ab74e39ae
    .xls windows office2003

    Kangatang