General

  • Target

    b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962

  • Size

    97KB

  • MD5

    657ae3ae22c2e5ed8318741642648a19

  • SHA1

    571d759230b230482d6955e89cdd27745f29d0e8

  • SHA256

    b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962

  • SHA512

    f325cf41416bdaedb1a949f860467046decf69a0f2d0a6789520828b1f093b7c9e2a2a80e5cfba7c76217e8b8158950b6742c4d3a5c686e6cb1bb338022a00bc

  • SSDEEP

    3072:u3xEtjPOtioVjDGUU1qfDlaGGx+cLYIxgyec2N:yxEtjPOtioVjDGUU1qfDlavx+WYIxgyy

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962
    .xls windows office2003

    Kangatang

    ThisWorkbook