Malicious MS Office Document analysis – 1498f1df4ca0

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

12 malicious · 29 files

OFF1498f1df4ca0e9cf23babe00cf34ed3dMS Office DocumentT1059.005 · ATT&CK T1564.007

OFF[Repaired @0x0000254A]sub-stream · MS Office Document

BINRoot Entry

OFF1Tableextracted from MS Office Document · MS Office Document

OFF[Repaired @0x0000074A]sub-stream · MS Office Document

XML[Content_Types].xmlextracted from MS Office Document · XML

BIN_rels

BINtheme

BINCompObjextracted from MS Office Document

BINWordDocumentextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document

BINMacros

BINPROJECTextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINVBA

BINdirextracted from MS Office Document

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

VBAThisDocumentsub-stream · VBA ModuleATT&CK T1564.007

VBS[Stored VBA]code extracted · VBScriptT1059.005 · ATT&CK T1564.007

VBS[Stored VBA].deobfuscated.vbsdeobfuscated · VBScriptT1059.005

VBA[PCode]disassembled · VBA ModuleATT&CK T1564.007

VBS[Decompiled VBA]decompiled · VBScriptT1059.005 · ATT&CK T1564.007

VBS[Decompiled VBA].deobfuscated.vbsdeobfuscated · VBScriptT1059.005

VBS[Full Diff]generated · VBScriptATT&CK T1564.007

VBA[Partial Diff]generated · VBA ModuleATT&CK T1564.007

BIN_VBA_PROJECTextracted from MS Office Document