Behavioral task
behavioral1
Sample
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605.xls
Resource
win10v2004-20250217-en
General
-
Target
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605
-
Size
349KB
-
MD5
80d3a2606e71b42adb3e597c1f5ec342
-
SHA1
9921532833999e93226149c455acea083d41bcef
-
SHA256
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605
-
SHA512
edfb792f6c23db954f453d27ce58aed6b2b409357734d6014e3ff065128df06accbe6e098bdafb97427f284c2818dd8ad2477d925d93a7646153418517a17ed8
-
SSDEEP
6144:WxEtjPOtioVjZUGGnwfDlavx+/xoY4GPOJ4LNm3pRFd+20vS2e2AZPhFZtlSbXo:1pTdNt2f83u4
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource yara_rule sample office_xlm_macros
Files
-
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605.xls windows office2003
Kangatang
ThisWorkbook
Sheet1
Sheet2
Sheet3
Sheet4
Sheet5
Sheet6