Behavioral task
behavioral1
Sample
b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962.xls
Resource
win10v2004-20241007-en
General
-
Target
b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962
-
Size
97KB
-
MD5
657ae3ae22c2e5ed8318741642648a19
-
SHA1
571d759230b230482d6955e89cdd27745f29d0e8
-
SHA256
b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962
-
SHA512
f325cf41416bdaedb1a949f860467046decf69a0f2d0a6789520828b1f093b7c9e2a2a80e5cfba7c76217e8b8158950b6742c4d3a5c686e6cb1bb338022a00bc
-
SSDEEP
3072:u3xEtjPOtioVjDGUU1qfDlaGGx+cLYIxgyec2N:yxEtjPOtioVjDGUU1qfDlavx+WYIxgyy
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
b481501979f7f312fe7d1dbcf6c7042768389d8da7c9a7bf51074d65c29f3962.xls windows office2003
Kangatang
ThisWorkbook