Behavioral task
behavioral1
Sample
0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485.xls
Resource
win10v2004-20241007-en
General
-
Target
0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485
-
Size
152KB
-
MD5
ece31f7744d0df679ddcb2fabdeb94ed
-
SHA1
0d3501669e4dc90d832060d018777f49e5f1fdfd
-
SHA256
0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485
-
SHA512
3f72093d1c602dd96fe0f73c63baabcfd8210f98f9c4f770a1e6166e987c4ee10211e298ecea0dc05120221124cfe76110af182adab5529a08d4204bc3dbd445
-
SSDEEP
3072:gc8rmjPOtyoVjDGL61EfDlaGGx+cLYIEP/C1xBfS3m1xD1x6E1xTLBS:b8rmjPOtyoVjDGL61EfDlavx+WYIEP/i
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
0fcc8b6003f351a424b9d8e38617b48859b433f2e3f578c8c47bc71fb2add485.xls windows office2003
Kangatang