Behavioral task
behavioral1
Sample
f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb.xls
Resource
win10v2004-20240910-en
General
-
Target
f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb
-
Size
200KB
-
MD5
06b36808865ad21607f8b7163136ab16
-
SHA1
c96b54413f103b2034321dc477fcbba5d43cd11a
-
SHA256
f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb
-
SHA512
b34736c61780328141226586dac56ae4778a55e336feda9d28800e812351c88b46ccf30a70db6b4981279bffad18675c6fbce4efc2fbf937ee220710286625d9
-
SSDEEP
1536:CEN1vsv7+Crir7QA3QKNqP4IJji/F1mWA8K5FFV3RCMUy6dbsGum1H3INhMSmBp+:C1mr7dGP4YjgXA7LFVBCMAnB3INGHn
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource yara_rule sample office_xlm_macros
Files
-
f6d8433ce5eec14e097929c4540a464d7325c4c2287a1600d73cba46e1b7a2eb.xls windows office2003
Kangatang
ThisWorkbook