Malicious
3cefc7d607d1bfb2ed3855cda11072c4
MS Office Document
MD5: 3cefc7d607d1bfb2ed3855cda11072c4
Size: 1.31 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
1.31 MB · 1,312,256 B
First seen
2026-06-21 09:46 · 4 months ago
Last seen
2026-06-21 09:46 · 4 months ago
Last analysis
2026-06-21 09:47 · 4 months ago
Hashes
MD5
3cefc7d607d1bfb2ed3855cda11072c4
Sha1
4e04540fa4a792d958a8ac39ca1acbd42c6fac46
Sha256
f93ff95b099ee0ae13f3bb4e6b80d3160b0485bb1e4f629be6895442f90355b8
Sha384
ceeffa7b5a024d8f407aa6f38224328f639212a7208edcd99cd19b1e6f5d122812066b662c05e92d56b3bbf3b41ddf09
Sha512
2abaaddc14a823d28550f16fcb719babfadf70d9c264efe2d824e4370f1d139cdc47438cf92fba794ab6a25a01818d5a7c80c00ef2a5fed65e9a6a0868a3ad68
SSDeep
24576:FYNSz7NRNXjA/+OmXCKcsKftqgyoQmuo/2rBWQA5U740mecvjJ:emjljA/jmSsKftqJoQmuo/OBuS40mec
TLSH
29552326FE839E9BDD0E00349667A0D1791F9E22BB445D6F37483B4A6C72131C7B6A1C
2 malicious · 59 files
OFF3cefc7d607d1bfb2ed3855cda11072c4
OFF[Repaired @0x00002600]
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BINMBD001C6ACF
XLSPackage
XML[Content_Types].xml
BIN_rels
XML.rels
BINxl
BIN_rels
XMLworkbook.xml.rels
XMLworkbook.xml
XMLsharedStrings.xml
BINmedia
IMGimage7.png
IMGimage7.png-preview.png
IMGimage8.jpeg
IMGimage8.jpeg-preview.png
EMFimage9.emf
IMGimage6.png
IMGimage6.png-preview.png
IMGimage5.jpeg
IMGimage5.jpeg-preview.png
IMGimage4.png
IMGimage4.png-preview.png
IMGimage2.png
IMGimage2.png-preview.png
IMGimage3.png
IMGimage3.png-preview.png
IMGimage1.png
IMGimage1.png-preview.png
XMLstyles.xml
BINtheme
XMLtheme1.xml
BINworksheets
BIN_rels
XMLsheet1.xml.rels
XMLsheet1.xml
BINdrawings
BIN_rels
XMLdrawing1.xml.rels
XMLvmlDrawing1.vml.rels
XMLdrawing1.xml
VMLvmlDrawing1.vml
BINembeddings
OFFoleObject1.bin
BINRoot Entry
BINOle
BINCompObj
PDFCONTENTS
BIN#Stream {UglyToad.PdfPig.Core.XrefLocation}
EXIF#Stream {UglyToad.PdfPig.Core.XrefLocation}.exif
IMG#Stream {UglyToad.PdfPig.Core.XrefLocation}-preview.png
BINText (Preview)
TXTPage #1
TXTPage #2
TXTPage #3
TXTStructure
BINprinterSettings
BINprinterSettings1.bin
BINdocProps
WMFthumbnail.wmf
XMLcore.xml
XMLapp.xml
XMLcustom.xml
BINCompObj
BINMBD001C6AD0
BINOle
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN_VBA_PROJECT
| Config. Field | Value |
|---|---|
| URL #1 | www.cahuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Name | Value |
|---|---|
| CONTENTS | 1.7 |
| CONTENTS | — |
| CONTENTS | D:20260418134318+05'30' |
| CONTENTS | D:20260418134318+05'30' |
| CONTENTS | 281411 AHU Quote Ananya Cleanroom Technologies.xlsx |
| CONTENTS | Microsoft: Print To PDF |
| CONTENTS | — |
| CONTENTS | D:20260418134318+05'30' |
| CONTENTS | D:20260418134318+05'30' |
| CONTENTS | Microsoft: Print To PDF |
| CONTENTS | 281411 AHU Quote Ananya Cleanroom Technologies.xlsx |
2 malicious · 59 files
OFF3cefc7d607d1bfb2ed3855cda11072c4
OFF[Repaired @0x00002600]
BINRoot Entry
| Config. Field | Value |
|---|---|
| URL #1 | www.cahuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account