General

  • Target

    f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb

  • Size

    200KB

  • MD5

    06b36808865ad21607f8b7163136ab16

  • SHA1

    c96b54413f103b2034321dc477fcbba5d43cd11a

  • SHA256

    f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb

  • SHA512

    b34736c61780328141226586dac56ae4778a55e336feda9d28800e812351c88b46ccf30a70db6b4981279bffad18675c6fbce4efc2fbf937ee220710286625d9

  • SSDEEP

    1536:CEN1vsv7+Crir7QA3QKNqP4IJji/F1mWA8K5FFV3RCMUy6dbsGum1H3INhMSmBp+:C1mr7dGP4YjgXA7LFVBCMAnB3INGHn

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb
    .xls windows office2003

    Kangatang

    ThisWorkbook