Malicious MS Office Document analysis – 0fbc2bf2f66f

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

7 malicious · 40 files

OFF0fbc2bf2f66fc72c521a9b8561bab1daMS Office Document

OFF[Repaired @0x000AF3C0]sub-stream · MS Office Document

XML[Content_Types].xmlextracted from MS Office Document · XML

BIN_rels

BINtheme

BINRoot Entry

OFF1Tableextracted from MS Office Document · MS Office Document

OFF[Repaired @0x000007C0]sub-stream · MS Office Document

BINCompObjextracted from MS Office Document

BINWordDocumentextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document

BINMacros

BINPROJECTextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINVBA

BINdirextracted from MS Office Document

VBAModule1sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBAModule2sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBAModule3sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

BIN__SRP_4extracted from MS Office Document

BIN__SRP_5extracted from MS Office Document

BIN__SRP_6extracted from MS Office Document

BIN__SRP_7extracted from MS Office Document

BIN__SRP_8extracted from MS Office Document

BIN__SRP_9extracted from MS Office Document

VBAThisDocumentsub-stream · VBA Module

BIN_VBA_PROJECTextracted from MS Office Document

7 malicious · 40 files

OFF0fbc2bf2f66fc72c521a9b8561bab1daMS Office Document

OFF[Repaired @0x000AF3C0]sub-stream · MS Office Document

XML[Content_Types].xmlextracted from MS Office Document · XML

BIN_rels

BINtheme

BINRoot Entry

OFF1Tableextracted from MS Office Document · MS Office Document

OFF[Repaired @0x000007C0]sub-stream · MS Office Document

BINCompObjextracted from MS Office Document

BINWordDocumentextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document

BINMacros

BINPROJECTextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINVBA

BINdirextracted from MS Office Document

VBAModule1sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBAModule2sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBAModule3sub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

BIN__SRP_4extracted from MS Office Document

BIN__SRP_5extracted from MS Office Document

BIN__SRP_6extracted from MS Office Document

BIN__SRP_7extracted from MS Office Document

BIN__SRP_8extracted from MS Office Document

BIN__SRP_9extracted from MS Office Document

VBAThisDocumentsub-stream · VBA Module

BIN_VBA_PROJECTextracted from MS Office Document

vbaDNA - VBA Stomping & Purging Stategy detection

	Module Name0
	Module1	Blacklist VBA VBA Macro
	Module2	VBA Macro
	Module3	VBA Macro
	ThisDocument	Blacklist VBA VBA Macro

No malware configuration was found at this point.

Coming soon: export of this report's indicators to MISP and EDR platforms.