General

  • Target

    cfd531b03a4345c3b1ce923ea9b7fde5a043d93699ee2524475dec8e04f6e937

  • Size

    537KB

  • MD5

    25f45687fa8ce2f0b3def9e5f7f67026

  • SHA1

    2f14d3766a60d2075824c3d4301a89af1e2ba301

  • SHA256

    cfd531b03a4345c3b1ce923ea9b7fde5a043d93699ee2524475dec8e04f6e937

  • SHA512

    ff4abab08cd4b58b21da2d01fe026788b47eb0a8355cd23a1d5af1653ebbc0f3a81802500e81d5e851ec1dca76e48b209653ceb572c7c4b244bd254b3c0b7de4

  • SSDEEP

    12288:zHy4zTdNOUH8oPFxBjf2OLRHtrNb4VWa:lEEp

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • cfd531b03a4345c3b1ce923ea9b7fde5a043d93699ee2524475dec8e04f6e937
    .xls windows office2003

    Kangatang

    ThisWorkbook