Malicious
MS Excel Document
MD5:
Size: 0 B
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
25 malicious · 91 files
XLSzx.xlsmT1059.005 · ATT&CK T1564.007
XML[Content_Types].xml
BIN_rels
BINxl
XMLworkbook.xml
BIN_rels
BINworksheets
BINtheme
XMLstyles.xml
XMLsharedStrings.xml
OFFvbaProject.binATT&CK T1564.007
BINRoot Entry
BINPROJECT
BINPROJECTwm
BINDPB
BINVBA
BINdir
VBADPB
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBAMy_Code
VBS[Stored VBA]T1059.005
VBS[Stored VBA].deobfuscated.vbsT1059.005
VBA[PCode]
VBASheet24
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBACustomMenu
VBACustomGroup
VBAImageribbon
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBACustomButton
VBAIntroduction
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBARibbonUpdateATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBS[Stored VBA].deobfuscated.vbsT1059.005
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBS[Decompiled VBA].deobfuscated.vbsT1059.005
VBS[Full Diff]ATT&CK T1564.007
VBA[Partial Diff]ATT&CK T1564.007
VBAThisWorkbook
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBAUpdateSheets
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
BIN_VBA_PROJECT
VBACustomRibbonTab
VBARibbonObjectsDefined
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
BINIntroduction
BINprinterSettings
BINtables
BINdocProps
BINcustomUI
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential