General

  • Target

    1cf04b9f7b26bf94d7751999b7fee0899faec4d4c2f036751a715555c62984b6

  • Size

    42KB

  • MD5

    132b9e8509525bbade9abcce234108dc

  • SHA1

    493dd94dc31da9f36285ab864f55e1a7340482da

  • SHA256

    1cf04b9f7b26bf94d7751999b7fee0899faec4d4c2f036751a715555c62984b6

  • SHA512

    d4c8612ec2565c33a5de32293bdb5f5e0259c064e6c98a688fd6929186d0fec96c22f3031c7cd92acea6d52ec998358402e2db14177048e6cce3e67608418ed6

  • SSDEEP

    768:Mb+SCMo9dHvQc9iEBfUC7tePsd7sejtSkZvkS2xEtjPOtioVjDGUU1qfDlaGGx+S:V3HvQc9iEBfUC7tePsd7sejtSkZvkS2y

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 1cf04b9f7b26bf94d7751999b7fee0899faec4d4c2f036751a715555c62984b6
    .xls windows office2003

    Kangatang