General

  • Target

    0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485

  • Size

    152KB

  • MD5

    ece31f7744d0df679ddcb2fabdeb94ed

  • SHA1

    0d3501669e4dc90d832060d018777f49e5f1fdfd

  • SHA256

    0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485

  • SHA512

    3f72093d1c602dd96fe0f73c63baabcfd8210f98f9c4f770a1e6166e987c4ee10211e298ecea0dc05120221124cfe76110af182adab5529a08d4204bc3dbd445

  • SSDEEP

    3072:gc8rmjPOtyoVjDGL61EfDlaGGx+cLYIEP/C1xBfS3m1xD1x6E1xTLBS:b8rmjPOtyoVjDGL61EfDlavx+WYIEP/i

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485
    .xls windows office2003

    Kangatang