General

  • Target

    b643f0c70ccc5676d8d88bc0615195f40bf763701387f67b9ccc4ff37f225355

  • Size

    1.5MB

  • MD5

    b1db50fd39101a9f00f6019a41146173

  • SHA1

    b99ee1661682d4095db67cf99823e4b050d3ed58

  • SHA256

    b643f0c70ccc5676d8d88bc0615195f40bf763701387f67b9ccc4ff37f225355

  • SHA512

    d7c3e3fdd158f3f4840b84b13a441c5fea90ceba712a158a10caa274567f2e7f6f46524f78dbd5c58f4dff980fb70f19f5110d09323a8d45e8ca2d2a705c12eb

  • SSDEEP

    24576:x8wPiXeV+fXR++idpgv/v5/r7DtYM9tnTEVxDCY6femXHxG+RUD/YsWeD:KwPiX4kYOf8

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • b643f0c70ccc5676d8d88bc0615195f40bf763701387f67b9ccc4ff37f225355
    .xls windows office2003

    Kangatang

    ThisWorkbook