Malicious
Malicious

3b2d339436af476adb10fd7a41f57483

MS Office Document
MD5: 3b2d339436af476adb10fd7a41f57483
Size: 1.96 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3b2d339436af476adb10fd7a41f57483
Sha1 cb11289d047db3087408a741f05ee0283cf420b2
Sha256 295fd997fff27d84839e01a87ab308f71dc37b56757ff3139c66ee22e70ec76e
Sha384 e0177e884dc284c9b7724e4ed920257b222550ce90d1df522096affc7749c115255fa4a8c09a2dac13562af84c0f87fd
Sha512 92c7e1720094d961ffeb9b2fe9ad5f4f9099ffb7cc2f7fa9cb5fae49593a06097abf9e6cb7163e27a9439af4b0d1743ef35925496d3ba0223e927bbc98d8cabb
SSDeep 24576:b93uqqNjpQ3uOXMo96m+Q7ynR4J74CWh9vF2a:Nuv9o9+Q7yn
TLSH 5095D642F72AC667C2585A354DDBC7A47730BD06AE46570330C9BB3E3DF7A90AE01689
3b2d339436af476adb10fd7a41f57483
Malicious
Root Entry
Malicious
Ctls
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
frmF1

frmF1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmXML
[Stored VBA]
[PCode]
[Decompiled VBA]
Modul1
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Modul2

Modul2

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Modul3

Modul3

[Stored VBA]
[PCode]
Klasse1

Klasse1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
__SRP_6
__SRP_7
__SRP_8
__SRP_9
__SRP_a
__SRP_b
__SRP_c
__SRP_d
__SRP_e
__SRP_f
frmError
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
__SRP_10
__SRP_11
__SRP_12
__SRP_13
__SRP_14
__SRP_15
__SRP_16
__SRP_17
__SRP_18
__SRP_19
__SRP_1a
__SRP_1b
__SRP_1c
__SRP_1d
__SRP_1e
__SRP_1f
__SRP_20
__SRP_21
__SRP_22
__SRP_23
__SRP_24
__SRP_25
__SRP_26
__SRP_27
__SRP_28
__SRP_29
__SRP_2a
__SRP_2b
__SRP_2c
__SRP_2d
__SRP_2e
__SRP_2f
__SRP_30
__SRP_31
__SRP_32
__SRP_33
__SRP_34
__SRP_35
__SRP_36
__SRP_37
__SRP_38
__SRP_39
__SRP_3a
__SRP_3b
__SRP_3c
__SRP_3d
Tabelle01

Tabelle01

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle02
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle03
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle04
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle05
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle06

Tabelle06

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle07
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle08
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle09
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle10
Malicious

Tabelle10

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Tabelle11
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
Tabelle12
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle13
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle14
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle15
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle16
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle17
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle18
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle19
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmNSTCode

frmNSTCode

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmShiptype

frmShiptype

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmCalendar1

frmCalendar1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
_VBA_PROJECT
Malicious
frmCountryName

frmCountryName

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmPurposeOfCall

frmPurposeOfCall

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
DieseArbeitsmappe

DieseArbeitsmappe

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmF1
f
o
CompObj
VBFrame
frmXML
f
o
VBFrame
frmError
f
o
VBFrame
frmNSTCode
f
o
VBFrame
frmShipType
f
o
VBFrame
frmCalendar1
f
o
VBFrame
frmCountryName
f
o
VBFrame
i04
f
o
x
CompObj
i06
f
o
CompObj
i07
f
o
frmPurposeOfCall
f
o
VBFrame
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
8 / 8
Path ole:doc~T1027~T1059.005~T1564.007>bin
Shape ole:doc>bin
malicious 2 nodes
Path ole:doc~T1027~T1059.005~T1564.007>ole:vba~T1059.005
Shape ole:doc>ole:vba
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 9huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3b2d339436af476adb10fd7a41f57483
Malicious
Root Entry
Malicious
Ctls
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
frmF1

frmF1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmXML
[Stored VBA]
[PCode]
[Decompiled VBA]
Modul1
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Modul2

Modul2

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Modul3

Modul3

[Stored VBA]
[PCode]
Klasse1

Klasse1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
__SRP_6
__SRP_7
__SRP_8
__SRP_9
__SRP_a
__SRP_b
__SRP_c
__SRP_d
__SRP_e
__SRP_f
frmError
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
__SRP_10
__SRP_11
__SRP_12
__SRP_13
__SRP_14
__SRP_15
__SRP_16
__SRP_17
__SRP_18
__SRP_19
__SRP_1a
__SRP_1b
__SRP_1c
__SRP_1d
__SRP_1e
__SRP_1f
__SRP_20
__SRP_21
__SRP_22
__SRP_23
__SRP_24
__SRP_25
__SRP_26
__SRP_27
__SRP_28
__SRP_29
__SRP_2a
__SRP_2b
__SRP_2c
__SRP_2d
__SRP_2e
__SRP_2f
__SRP_30
__SRP_31
__SRP_32
__SRP_33
__SRP_34
__SRP_35
__SRP_36
__SRP_37
__SRP_38
__SRP_39
__SRP_3a
__SRP_3b
__SRP_3c
__SRP_3d
Tabelle01

Tabelle01

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle02
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle03
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle04
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle05
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle06

Tabelle06

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle07
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle08
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle09
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle10
Malicious

Tabelle10

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Tabelle11
Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
Tabelle12
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle13
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle14
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle15
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle16
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle17
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle18
Malicious
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Tabelle19
[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmNSTCode

frmNSTCode

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmShiptype

frmShiptype

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmCalendar1

frmCalendar1

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
_VBA_PROJECT
Malicious
frmCountryName

frmCountryName

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmPurposeOfCall

frmPurposeOfCall

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
DieseArbeitsmappe

DieseArbeitsmappe

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
frmF1
f
o
CompObj
VBFrame
frmXML
f
o
VBFrame
frmError
f
o
VBFrame
frmNSTCode
f
o
VBFrame
frmShipType
f
o
VBFrame
frmCalendar1
f
o
VBFrame
frmCountryName
f
o
VBFrame
i04
f
o
x
CompObj
i06
f
o
CompObj
i07
f
o
frmPurposeOfCall
f
o
VBFrame

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
frmF1
VBA Macro
Modul2
Blacklist VBA
VBA Macro
Modul3
Blacklist VBA
VBA Macro
Klasse1
VBA Macro
Tabelle01
VBA Macro
Tabelle06
VBA Macro
Tabelle10
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
vbaDNA free preview is limited to 3 modules. Unlock the full module analysis (decompiled P-Code, stomping diffs).
Unlock with Essential
frmNSTCode
VBA Macro
frmShiptype
VBA Macro
frmCalendar1
VBA Macro
frmCountryName
VBA Macro
frmPurposeOfCall
VBA Macro
DieseArbeitsmappe
VBA Macro
No malware configuration was found at this point.
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmF1 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmF1 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › DieseArbeitsmappe › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › DieseArbeitsmappe › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmPurposeOfCall › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmCountryName › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmPurposeOfCall › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmCountryName › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmCalendar1 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Modul1 › [Partial Diff]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Modul1 › [Full Diff]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmShiptype › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmShiptype › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmCalendar1 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle19 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmNSTCode › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmNSTCode › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle18 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle19 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle17 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle18 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Klasse1 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Klasse1 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmError › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › frmError › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle17 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle16 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle16 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle02 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle02 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle15 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle15 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle14 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle14 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle12 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle12 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle11 › [Full Diff]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle11 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle11 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle10 › [Full Diff]
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle03 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle03 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle10 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 9huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle10 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle09 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle04 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle04 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle05 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle05 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle06 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle06 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle07 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle07 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle09 › [Stored VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle08 › [Decompiled VBA]
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
3b2d339436af476adb10fd7a41f57483 › Root Entry › _VBA_PROJECT_CUR › VBA › Tabelle08 › [Stored VBA]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙