General

  • Target

    c978d4f06affcb9ffc61cd70c76df69454b4bc3fdb72cebc68cd83bc7ea73a47

  • Size

    165KB

  • MD5

    9e59dc6d9078842f8987151ce04c0b00

  • SHA1

    d9526a20b8ab6b2555354d1fe77fc91ece65ff11

  • SHA256

    c978d4f06affcb9ffc61cd70c76df69454b4bc3fdb72cebc68cd83bc7ea73a47

  • SHA512

    7cba824e4c1d6a6b922c8e6dc18888250239e5fe29b220e0887e884ebdf319d162194c103842aaec3cd663cb399b85eca641c6ff4561f1be8896dd1a2d6e635c

  • SSDEEP

    3072:3AxEtjPOtioVjDGUU1qfDlaGGx+cL/IEHgny9MnLm9MLL49MoL89MFLV9MGL+/59:wxEtjPOtioVjDGUU1qfDlavx+W/IEH41

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • c978d4f06affcb9ffc61cd70c76df69454b4bc3fdb72cebc68cd83bc7ea73a47
    .xls windows office2003

    Kangatang

    ThisWorkbook