Behavioral task
behavioral1
Sample
5513146903b57bf3ead5478137751f1b61777425126fb853af8e2b82f6cc9e77.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5513146903b57bf3ead5478137751f1b61777425126fb853af8e2b82f6cc9e77.xls
Resource
win10v2004-20241007-en
General
-
Target
5513146903b57bf3ead5478137751f1b61777425126fb853af8e2b82f6cc9e77
-
Size
78KB
-
MD5
668c0127a2aca6c8c59200e4f457b48b
-
SHA1
c1f41712c41f523da7d81f7ed749a2228d475e2b
-
SHA256
5513146903b57bf3ead5478137751f1b61777425126fb853af8e2b82f6cc9e77
-
SHA512
278f8cc21688c3ccad99c2f5610057896c5b86fc8dc121b412f692cf0e1bcc2f809035620c8a86797f2798ee577c02edd08db628c21c52dba9f19023341a2e32
-
SSDEEP
1536:n9DYZP5HNfeQuP8mo0ioq0C3tL9n9t3j/VxEtjPOtioVjDGUU1qfDlaGGx+cL/Ip:n9D8P5HNfeQu8mo0ioq0C3tL9n9t3j/B
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
5513146903b57bf3ead5478137751f1b61777425126fb853af8e2b82f6cc9e77.xls windows office2003
Kangatang
ThisWorkbook