Malicious
Malicious

37fa70a6e98dd9cfe8a6fc9501834bd9

MS Office Document
MD5: 37fa70a6e98dd9cfe8a6fc9501834bd9
Size: 514.05 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 37fa70a6e98dd9cfe8a6fc9501834bd9
Sha1 b2e770604e3fb1f2499469e74ebdab20cd4fee40
Sha256 c4ed041045a4c0eacd673fc5d85329cd4e082cdbed11a8ba87994b8ee2c9214d
Sha384 7e179a2905b9538b9ddb3a7161d98fc5ade0d2d64d2e1c6ad89d975ffd45b43647e1cdead6d83a5e0850ae7f8a224d50
Sha512 a1b35b39aae78cb27246bef1115ae4a9812979799ea61f97fa4336e0f9d978c2517c7145991aa80b18b63b34aa1b2023e92c4902d59a26973e304c33f07b878b
SSDeep 12288:h5E03Uj6WdMXMegxsEBUz9Id+qWay4nT:PE0WnK8xC9IkMT
TLSH 20B4F1A0B5948F59DB464F76CB9B8AC00325BDB35F19A60B31827B0D5EF33823947C69
37fa70a6e98dd9cfe8a6fc9501834bd9
Malicious
[Repaired @0x00039A00]
Malicious
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001398D0
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
worksheets
theme
theme1.xml
styles.xml
drawings
vmlDrawing1.vml
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD001398D1
Ole
MBD002EB9A7
Workbook
SummaryInformation
DocumentSummaryInformation
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
37fa70a6e98dd9cfe8a6fc9501834bd9
Malicious
[Repaired @0x00039A00]
Malicious
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001398D0
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
worksheets
theme
theme1.xml
styles.xml
drawings
vmlDrawing1.vml
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD001398D1
Ole
MBD002EB9A7
Workbook
SummaryInformation
DocumentSummaryInformation
No malware configuration was found at this point.
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
37fa70a6e98dd9cfe8a6fc9501834bd9 › Root Entry › MBD001398D0 › Package › xl › worksheets › _rels › sheet1.xml.rels
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙