General

  • Target

    a2b53f42f5ad5c5729fa8e52eca2f38c92db61776ee5c36ee86cf698b8ffbd2b

  • Size

    346KB

  • MD5

    350be1c62fe1a576bae4a141dc960cf7

  • SHA1

    ebfc4316a986951403362b6cd2ac0676cfcf876d

  • SHA256

    a2b53f42f5ad5c5729fa8e52eca2f38c92db61776ee5c36ee86cf698b8ffbd2b

  • SHA512

    56f7e941be1caa2f0b1c75b05a2bdd2f26b559cb9d8e895af274b5306b3d3e994dbc89be72dd710414145931537ebcdafe9396e3d49d02d466b5b679f8fa67a5

  • SSDEEP

    6144:MxEtjPOtioVjZUGGnwfDlavx+/xoY4GPOJ4FNaCpRFd+y0vS2e2AdPhFZtNl+8:spTdZt2fw3m

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

Files

  • a2b53f42f5ad5c5729fa8e52eca2f38c92db61776ee5c36ee86cf698b8ffbd2b
    .xls windows office2003

    Kangatang

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3

    Sheet4

    Sheet5

    Sheet6