Malicious
MS Office Document
MD5: 37fa70a6e98dd9cfe8a6fc9501834bd9
Size: 514.05 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
514.05 KB · 514,048 B
First seen
2026-07-03 18:01 · 3 months ago
Last seen
2026-07-03 18:01 · 3 months ago
Last analysis
2026-07-08 17:46 · 3 months ago
Hashes
MD5
37fa70a6e98dd9cfe8a6fc9501834bd9
Sha1
b2e770604e3fb1f2499469e74ebdab20cd4fee40
Sha256
c4ed041045a4c0eacd673fc5d85329cd4e082cdbed11a8ba87994b8ee2c9214d
Sha384
7e179a2905b9538b9ddb3a7161d98fc5ade0d2d64d2e1c6ad89d975ffd45b43647e1cdead6d83a5e0850ae7f8a224d50
Sha512
a1b35b39aae78cb27246bef1115ae4a9812979799ea61f97fa4336e0f9d978c2517c7145991aa80b18b63b34aa1b2023e92c4902d59a26973e304c33f07b878b
SSDeep
12288:h5E03Uj6WdMXMegxsEBUz9Id+qWay4nT:PE0WnK8xC9IkMT
TLSH
20B4F1A0B5948F59DB464F76CB9B8AC00325BDB35F19A60B31827B0D5EF33823947C69
2 malicious · 26 files
OFF37fa70a6e98dd9cfe8a6fc9501834bd9
OFF[Repaired @0x00039A00]
BINRoot Entry
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential