Malicious
Malicious

MS Office Document
MD5: 37e870345827c7e8f4d4c962e99cdf25
Size: 991.23 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 37e870345827c7e8f4d4c962e99cdf25
Sha1 51dbe8087f13b2e27d1e9a03c4117971cd61ea0b
Sha256 2edae586dea8b030446cb55e2408e3620a272eb2a0158b31693703e2d8e33df3
Sha384 85d708546143f1e27728a0aaf2b7f98aefe1d1111c99ec95de15e94eacb3fbd22774c6490f37ce4c140f5cfcf3fa4d66
Sha512 a1dc6c567de9e808120d4b310c3c898342f001b3d1cf30a4186ecbf9c16b1ed1ab8b2212d2e5ad178f7b3ca288d3abd591af2caf674280eecee96f1603dae6fc
SSDeep 24576:jt8gBRkZAxd8I0xC6NRXDaDwtJeoepRO68Qg:+gBeZ2R0sQFDO+0oevtx
TLSH 3725230B79C48603C162967C58C2D8A161199CADDA60CDAFAE037E3F71FEAF5DC9211D
[Repaired @0x00001400]
Malicious
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00928975
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
theme
theme1.xml
media
image3.emf
image2.emf
image1.emf
worksheets
sheet3.xml
sheet2.xml
_rels
sheet2.xml.rels
sheet3.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
embeddings
oleObject3.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream {20}
#Stream {17}
#Stream {35}
#Stream {32}
#Stream {30}
#Stream {27}
#Stream {25}
#Stream {22}
#Stream {15}
#Stream {13}
#Stream {5}
Structure
oleObject2.bin
Root Entry
CONTENTS
#Stream {18}
#Stream {21}
#Stream {24}
#Stream {27}
Structure
oleObject1.bin
Root Entry
Text (Preview)
#Stream {2}
#Stream {8}
#Stream {10}
#Stream {11}
#Stream {12}
#Stream {13}
#Stream {14}
#Stream {15}
#Stream {16}
#Stream {17}
#Stream {18}
#Stream {19}
#Stream {20}
#Stream {21}
#Stream {22}
#Stream {23}
#Stream {24}
#Stream {25}
#Stream {26}
#Stream {27}
#Stream {28}
#Stream {29}
#Stream {30}
#Stream {31}
#Stream {32}
#Stream {33}
Structure
styles.xml
sharedStrings.xml
printerSettings
printerSettings1.bin
printerSettings2.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00928976
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
Name Value
CONTENTS
1.4
CONTENTS
D:20251009073557-05'00'
CONTENTS
KM_C450i
CONTENTS
D:20251009082612-04'00'
CONTENTS
SKM_C450i25100907350
CONTENTS
KONICA MINOLTA bizhub C450i
CONTENTS
D:20251009073557-05'00'
CONTENTS
KM_C450i
CONTENTS
D:20251009082612-04'00'
CONTENTS
KONICA MINOLTA bizhub C450i
CONTENTS
SKM_C450i25100907350
CONTENTS
1.7
CONTENTS
Crystal Reports
CONTENTS
Powered By Crystal
CONTENTS
Powered By Crystal
CONTENTS
Crystal Reports
CONTENTS
1.3
CONTENTS
PEREIRAR
CONTENTS
D:20251017202108
CONTENTS
Form ZMMFMGL001 PT
CONTENTS
SAP NetWeaver 740
CONTENTS
PEREIRAR
CONTENTS
D:20251017202108
CONTENTS
Form ZMMFMGL001 PT
CONTENTS
SAP NetWeaver 740
[Repaired @0x00001400]
Malicious
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00928975
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
theme
theme1.xml
media
image3.emf
image2.emf
image1.emf
worksheets
sheet3.xml
sheet2.xml
_rels
sheet2.xml.rels
sheet3.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
embeddings
oleObject3.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream {20}
#Stream {17}
#Stream {35}
#Stream {32}
#Stream {30}
#Stream {27}
#Stream {25}
#Stream {22}
#Stream {15}
#Stream {13}
#Stream {5}
Structure
oleObject2.bin
Root Entry
CONTENTS
#Stream {18}
#Stream {21}
#Stream {24}
#Stream {27}
Structure
oleObject1.bin
Root Entry
Text (Preview)
#Stream {2}
#Stream {8}
#Stream {10}
#Stream {11}
#Stream {12}
#Stream {13}
#Stream {14}
#Stream {15}
#Stream {16}
#Stream {17}
#Stream {18}
#Stream {19}
#Stream {20}
#Stream {21}
#Stream {22}
#Stream {23}
#Stream {24}
#Stream {25}
#Stream {26}
#Stream {27}
#Stream {28}
#Stream {29}
#Stream {30}
#Stream {31}
#Stream {32}
#Stream {33}
Structure
styles.xml
sharedStrings.xml
printerSettings
printerSettings1.bin
printerSettings2.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00928976
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙