Behavioral task
behavioral1
Sample
2cf1ef04c9959bde77047b4b30af51b199de4ad4154d17d1b9677551644ae2ab.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cf1ef04c9959bde77047b4b30af51b199de4ad4154d17d1b9677551644ae2ab.xls
Resource
win10v2004-20241007-en
General
-
Target
2cf1ef04c9959bde77047b4b30af51b199de4ad4154d17d1b9677551644ae2ab
-
Size
537KB
-
MD5
d015f0688c6c202a308be3f7f68c2ac4
-
SHA1
d2383e3bd8ac872ecffd0e21424119db73a38dbb
-
SHA256
2cf1ef04c9959bde77047b4b30af51b199de4ad4154d17d1b9677551644ae2ab
-
SHA512
224acb40768e9fa50f290939ca31341061e9591fe6c0e26abb12f29351a1339eb1c5830369b214cfb59be3772e03c6912bc1bf1965c23ce0220b21c1e25add2e
-
SSDEEP
12288:WHy4zTdNOUH8oPFxBjf2OLRHtrNb4VWa:gEEp
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
2cf1ef04c9959bde77047b4b30af51b199de4ad4154d17d1b9677551644ae2ab.xls windows office2003
Kangatang
ThisWorkbook