Behavioral task
behavioral1
Sample
ea2f9517c0225c3d0ce695d3db432cee6f7b7710886d7fc4ea5b1095d88a7f1e.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea2f9517c0225c3d0ce695d3db432cee6f7b7710886d7fc4ea5b1095d88a7f1e.xls
Resource
win10v2004-20240802-en
General
-
Target
ea2f9517c0225c3d0ce695d3db432cee6f7b7710886d7fc4ea5b1095d88a7f1e
-
Size
72KB
-
MD5
111ec521e096bcde72b283f24a0d2b69
-
SHA1
b50e014d0185175e189fe75b34dc4b68b98527bf
-
SHA256
ea2f9517c0225c3d0ce695d3db432cee6f7b7710886d7fc4ea5b1095d88a7f1e
-
SHA512
9a7c6b330548e708fa1a4be975b3460bb589d0fe7785c3c40d99e5275c7d7f9ce8f522dd6f5a492db8992ab911b92efc9a4a80389a824342762f0ed57e057564
-
SSDEEP
1536:flk8rmjPOtyoVjDGL61EfDlaGGx+cLYIxASPiYhuLzQASURJLFAhf8tJ:fy8rmjPOtyoVjDGL61EfDlaGGx+cLYIq
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
ea2f9517c0225c3d0ce695d3db432cee6f7b7710886d7fc4ea5b1095d88a7f1e.xls windows office2003
Kangatang
ThisWorkbook