Malicious
3a95186019af1943a0ea0f8eb07a288f
MS Office Document | MD5: 3a95186019af1943a0ea0f8eb07a288f | Size: 2.92 MB | application/vnd.ms-office
MS Office Document
MD5: 3a95186019af1943a0ea0f8eb07a288f
Size: 2.92 MB
application/vnd.ms-office
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 3a95186019af1943a0ea0f8eb07a288f
|
| Sha1 | b7e56f4b31f4fdbe844c3d4a4156f1d0e3b3ea97
|
| Sha256 | f38a56b8dc0e8a581999621eef65ef497f0ac0d35e953bd94335926f00e9464f
|
| Sha384 | 26da4a5a6068d9a63a976dc31de61639a7b3fd8ff3747f7323cf4d661b77bd101356b71140f052c233a06a8ec9c6afb9
|
| Sha512 | fdb90c89555feb62eb263067041304de7528f44c5cfde668c04b3113e060e674b508fb1308df46641e91ac104223117cce65588e41a8ad1d2cc1901446d2e75f
|
| SSDeep | 24576:J97DkXCl6mchTj6QZ0sedNOX7Prm4M3fbVaVHqkP3O55+D1K:b76CQm
|
| TLSH | 6BD5C6D05AC54A81F157D844B494FFE2093A7A67FADC0CF2D37A2A09CF6E9221647E4C
|
File Structure
Root Entry
Malicious
Data
CompObj
WordDocument
SummaryInformation
DocumentSummaryInformation
Macros
PROJECT
PROJECTwm
VBA
dir
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
_VBA_PROJECT
UserForm1
f
o
CompObj
VBFrame
ObjectPool
_1829073733
PRINT
CompObj
ObjInfo
OCXNAME
contents
MsoDataStore
ÀWBE02ORNE4ÁÝUÑKÊÔ5ÊVÐ==
Item
Properties
Artefacts
|
Name0 | Value |
|---|---|
| URLs in VB Code - #1 | http://schemas.openxmlformats.org/officeDocument/2006/ |
| URLs in VB Code - #2 | http://schemas.openxmlformats.org/officeDocument/2006/bibliography |
| URLs in VB Code - #3 | http://schemas.openxmlformats.org/officeDocument/2006/customXml |
| URLs in VB Code - #4 | http://schemas.openxmlformats.org/drawingml/2006/main |
3a95186019af1943a0ea0f8eb07a288f (2.92 MB)
File Structure
Root Entry
Malicious
Data
CompObj
WordDocument
SummaryInformation
DocumentSummaryInformation
Macros
PROJECT
PROJECTwm
VBA
dir
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
_VBA_PROJECT
UserForm1
f
o
CompObj
VBFrame
ObjectPool
_1829073733
PRINT
CompObj
ObjInfo
OCXNAME
contents
MsoDataStore
ÀWBE02ORNE4ÁÝUÑKÊÔ5ÊVÐ==
Item
Properties
Characteristics
vbaDNA - VBA Stomping & Purging Stategy detection
|
Module Name0 | ||
|---|---|---|
| ThisDocument | Blacklist VBA VBA Macro |
|
No malware configuration were found at this point.
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| URLs in VB Code - #1 | http://schemas.openxmlformats.org/officeDocument/2006/ |
3a95186019af1943a0ea0f8eb07a288f |
| URLs in VB Code - #2 | http://schemas.openxmlformats.org/officeDocument/2006/bibliography |
3a95186019af1943a0ea0f8eb07a288f |
| URLs in VB Code - #3 | http://schemas.openxmlformats.org/officeDocument/2006/customXml |
3a95186019af1943a0ea0f8eb07a288f |
| URLs in VB Code - #4 | http://schemas.openxmlformats.org/drawingml/2006/main |
3a95186019af1943a0ea0f8eb07a288f |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.